The Case for Endpoint Visibility

With many data breaches in the news, businesses are recognizing that they're at a greater risk of being compromised. These breaches are so damaging that a Presidential executive order was issued. ('Executive Order -- Improving Critical Infrastructure Cybersecurity | whitehouse.gov,' 2013) No longer is the business's firewall able provide the needed defenses to ward off the attacks trying to compromise its network. Management is tasking Information Technology (IT) professionals to build cybersecurity programs to ward off these attacks and prevent the business from becoming the next victim of a data breach. Where to start? What steps need to be done and what order? How to measure the effectiveness of the program? Which standards to use? The National Institute of Standards and Technology (NIST) Cybersecurity Framework and the Center for Internet Security (CIS) Critical Security Controls (CSC) can provide a proven vetted model to help your build your cybersecurity program. This paper will utilize the NIST Cybersecurity Framework and the first two CSCs showing how they can be adapted to a business' existing cybersecurity program.