Given Competing Standards Presented Nist Iso Organizations Know Standard Follow Organizati Q34291662

Given the competing standards presented by NIST, ISO and otherorganizations how do we know which standard to follow for ourorganization? Are they the same or different? Compare and contrastthe SP-800 RMF to the ISO 27000 framework. Find a few keysimilarities and important differences.

Expert Answer

Yes, there are competing standardspresented by NIST, ISO and other organizations. The ChiefInformation Security Officer (CISO) has the daunting responsibilityin identity and access management (IAM) and also ensures preventionof any data loss (DLP). CISO is also responsible to manage othersecurity programs. The best way to identify the best standards tofollow is to build and maintain