Lesson 7: Countermeasures

Identifying risks using RMF

Data and I/T systems must be protected at all cost and having the proper security controls in place can assist in preventing cyber attacks. If you’re not sure of what your approach should be or where to begin, this is where the use of Risk Management Frameworks come into play. Risk Management in cybersecurity is the practice of identifying and minimizing potential risks or threats to networked systems, data, and users. Following a risk management framework can help organizations better protect their assets and their business. These frameworks are designed to provide guidance for implementing a cybersecurity risk management program. Some popular frameworks you may have heard of or already use include NIST SP 800-53 and ISO27014:2020. You can learn more about both of these frameworks and others online.

By having the proper security controls in place, you enhance your overall security by prioritizing risks based on its level of severity, you improve your cybersecurity ROI by ensuring that resources are used to manage bigger threats over lesser threats, and you are able to achieve regulatory compliance, reducing the risk of legal repercussions.