Promoting Cybersecurity Compliance

Mark A. Harris; Ronald Martin

doi:10.4018/978-1-7998-8954-0.ch097

Promoting Cybersecurity Compliance

Mark A. Harris, Ronald Martin

Cyber Security Education Initiative

Research output: Chapter in Book/Report/Conference proceeding › Chapter

Abstract

In a global online economy, organizations are tasked with protecting their cybersecurity assets. Penalties from failing to protect assets, such as customer data, can severely harm an organization and even lead to bankruptcy. Cybersecurity governance programs need to be aware of the laws and regulations affecting their organizations and use applicable standards or frameworks to develop appropriate cybersecurity polices and controls. Compliance programs then need to monitor policy compliance on a continuing basis. This chapter discusses the laws, regulations, and standards that are used to create cybersecurity polices and the typical tools used to measure compliance. In addition, theoretical cybersecurity compliance research is reviewed to highlight supplementary techniques to improve compliance.

Original language	English (US)
Title of host publication	Research Anthology on Privatizing and Securing Data
Publisher	IGI Global
Pages	1990-2007
Number of pages	18
ISBN (Electronic)	9781799889557
ISBN (Print)	9781799889540
DOIs	https://doi.org/10.4018/978-1-7998-8954-0.ch097
State	Published - Jan 1 2021

ASJC Scopus subject areas

General Computer Science

Access to Document

10.4018/978-1-7998-8954-0.ch097

Cite this

@inbook{151d13be118b4d6ba40c9d134a7d360a,

title = "Promoting Cybersecurity Compliance",

abstract = "In a global online economy, organizations are tasked with protecting their cybersecurity assets. Penalties from failing to protect assets, such as customer data, can severely harm an organization and even lead to bankruptcy. Cybersecurity governance programs need to be aware of the laws and regulations affecting their organizations and use applicable standards or frameworks to develop appropriate cybersecurity polices and controls. Compliance programs then need to monitor policy compliance on a continuing basis. This chapter discusses the laws, regulations, and standards that are used to create cybersecurity polices and the typical tools used to measure compliance. In addition, theoretical cybersecurity compliance research is reviewed to highlight supplementary techniques to improve compliance.",

author = "Harris, {Mark A.} and Ronald Martin",

note = "Publisher Copyright: {\textcopyright} 2021, IGI Global.",

year = "2021",

month = jan,

day = "1",

doi = "10.4018/978-1-7998-8954-0.ch097",

language = "English (US)",

isbn = "9781799889540",

pages = "1990--2007",

booktitle = "Research Anthology on Privatizing and Securing Data",

publisher = "IGI Global",

}

TY - CHAP

T1 - Promoting Cybersecurity Compliance

AU - Harris, Mark A.

AU - Martin, Ronald

PY - 2021/1/1

Y1 - 2021/1/1

N2 - In a global online economy, organizations are tasked with protecting their cybersecurity assets. Penalties from failing to protect assets, such as customer data, can severely harm an organization and even lead to bankruptcy. Cybersecurity governance programs need to be aware of the laws and regulations affecting their organizations and use applicable standards or frameworks to develop appropriate cybersecurity polices and controls. Compliance programs then need to monitor policy compliance on a continuing basis. This chapter discusses the laws, regulations, and standards that are used to create cybersecurity polices and the typical tools used to measure compliance. In addition, theoretical cybersecurity compliance research is reviewed to highlight supplementary techniques to improve compliance.

AB - In a global online economy, organizations are tasked with protecting their cybersecurity assets. Penalties from failing to protect assets, such as customer data, can severely harm an organization and even lead to bankruptcy. Cybersecurity governance programs need to be aware of the laws and regulations affecting their organizations and use applicable standards or frameworks to develop appropriate cybersecurity polices and controls. Compliance programs then need to monitor policy compliance on a continuing basis. This chapter discusses the laws, regulations, and standards that are used to create cybersecurity polices and the typical tools used to measure compliance. In addition, theoretical cybersecurity compliance research is reviewed to highlight supplementary techniques to improve compliance.

UR - http://www.scopus.com/inward/record.url?scp=85134966367&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85134966367&partnerID=8YFLogxK

U2 - 10.4018/978-1-7998-8954-0.ch097

DO - 10.4018/978-1-7998-8954-0.ch097

M3 - Chapter

AN - SCOPUS:85134966367

SN - 9781799889540

SP - 1990

EP - 2007

BT - Research Anthology on Privatizing and Securing Data

PB - IGI Global

ER -

Promoting Cybersecurity Compliance

Abstract

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this