Home

What are Frameworks?

Frameworks are the foundation for any good information security program. Using industry recognized frameworks when building your particular information security program will not only help your organization take a proactive approach to information security, but demonstrate due diligence to potential clients and business partners concerned with information security.

The National Institute of Standards and Technology (NIST) is the foremost governing body for technology measurement and standards in the United States. This body releases many standards and best practices for all aspects of business and technology. Specific to information security, the NIST 800 series can provide you with the best possible solution for compliance with government regulations.

The ISO 27000 series is the most referenced security standard in the world. It specifies a system that is intended to bring information security to the management level. It provides organizations with a way to measure their information security program as well as a framework on which to build their information security program.

The Information Technology Infrastructure Library (ITIL) security management guidelines are designed to help mature security organizations measure how their information security processes are managed. The ultimate goal of ITIL is to transform an organization’s technology and administrative processes into true service provider roles in support of the organization. This process improves the ability to manage and measure the Service Level Agreements (SLAs) provided by IT.