Chapter 3: Comprehending Policies, Procedures, Compliance, and Audits

"All industries are facing the necessity to have subject matter experts on Cybersecurity; while the current reality has demonstrated a deficit of this profile in the market. This means an opportunity for us to get specialized on the matter and help industries to mitigate current and future Cybersecurity related risks."

– Joel González Saldivar – Human resources and skills development expert México

Policies, procedures, compliance, and audits are topics that may sound boring for technical specialists. However, they are of utter importance in the field of cybersecurity.

In fact, policies and procedures are the backbone of all organizations' cybersecurity strategy and posture, while compliance and audits are the best mechanisms to ensure they are being followed; therefore, these are critical topics to be addressed by all cybersecurity professionals.

You also need a...