Information security

While we understand that the SOC, IR teams, red and blue teams, and even the organization's threat intelligence program most likely fall within INFOSEC organizations for many businesses, it's important to highlight how the INFOSEC organization itself can utilize the threat intelligence that has been created, along with the different responsibilities it has from the individual components of its organization.

One of the core responsibilities of the INFOSEC organization is to develop and implement a comprehensive cyber security program. Often, this means adopting a compliance framework that allows the organization to measure, provide metrics for, and show that they have taken the appropriate measures to comply with the chosen framework. A freely available framework has been published by the United States Government (USG) – specifically, the National Institute of Standards and Technology (NIST). This cyber security framework has been adopted by...