Cyberstudy
PDF p.381 In progress Not in the PDF's table of contents

Monitoring and Revision

Open PDF at p.381 9 flashcards

Summary

PDF p.381

Organizations must regularly monitor, evaluate, and update their cybersecurity policies, procedures, standards, and legal compliance practices to adapt to the evolving cybersecurity landscape.

In plain words

Supplementary — not from your PDF

Policies, procedures and standards must be monitored and revised as things change. Diverse groups review them, audits and assessments measure compliance and find new risks, and revisions are driven by compliance reports, new technology, changed business processes, new laws or new risks. Staff are trained on changes.

Detailed explanation

PDF p.381
  • Process
    • Collaboration: Diverse groups review policies, procedures, and standards.
    • Audits and Assessments: Measure compliance and identify new risks.
    • Revisions: Driven by compliance reports, technological changes, business processes, laws, or new risks.
    • Training: Inform employees of policy changes and ensure compliance.

Important terms

taken from the text above
Collaboration
Diverse groups review policies, procedures, and standards.
Audits and Assessments
Measure compliance and identify new risks.
Revisions
Driven by compliance reports, technological changes, business processes, laws, or new risks.
Training
Inform employees of policy changes and ensure compliance.

Examples & real-world scenarios

Supplementary — not from your PDF
  • An annual policy review.
  • Updating a policy after a new law takes effect.
  • Retraining staff when a policy changes.

Scenario

A new privacy law passes but the company's policies are two years old. A regular monitoring and revision cycle would have prompted an update and retraining.

Common mistakes

Supplementary — not from your PDF
  • Writing policies once and never revisiting them.
  • Updating policies but not telling staff.

Practical skills

Supplementary — not from your PDF
  • Explain what triggers a policy revision.

What I should remember

Key Points PDF p.381
  • Collaboration: Review and update practices.
  • Audits: Measure compliance.
  • Revisions: Driven by changes and risks.
  • Training: Ensure continued compliance.