Central Washington University Cybersecurity Framework Discussion

You have explained why the company needs to employ a cybersecurityframework based on NIST and families of control that are described inthe NIST SP 800-53. I agree with you that the company is lacking ininternal controls and what kind of controls can be used to reduce ormitigate the mentioned risk? This assignment was for you to recommend ITsecurity controls and you recommended implementing NIST but I wouldhave added more details. For example, to prevent such incidents andusing NIST families of controls, AU (Audit and Accountability) and CP(Contingency Planning) should be used to deter such deficiencies. Inmore detail, audit management software can be used to leave records ofevents that occurred. This will deter criminal activities by usingcompany IT assets. Also, I want to point out that using a properbusiness memorandum format to address the recommendation perassignment’s description.