Cyber and Technology Risk Management Forum, Park City, UT

7+( $57 2) &<%(56(&85,7< 0(75,&6

Frameworks – Not an Exhaustive List

‰ 3&, '66 3D\PHQW &DUG ,QGXVWU\ 'DWD 6HFXULW\ 6WDQGDUG ‰ */%$ *UDKDP /HDFK %OLOH\ $FW ‰ &262 &RPPLWWHH RI 6SRQVRULQJ 2UJDQL]DWLRQV ‰ ,56 ‰ )(53$ )HGHUDO (GXFDWLRQDO 5HFRUGV 3URWHFWLRQ $FW ‰ +,3$$ +HDOWK ,QVXUDQFH 3RUWDELOLW\ $FFRXQWDELOLW\ $FW ‰ &-,6 &ULPLQDO -XVWLFH ,QIRUPDWLRQ 6HFXULW\

‰ 1,67 ‰ &, &ULWLFDO ,QIUDVWUXFWXUH ‰ &6& &ULWLFDO 6HFXULW\ &RQWUROV IRU (IIHFWLYH &\EHU 'HIHQVH ‰ &2%,7 &RQWURO 2EMHFWLYHV IRU ,7 ‰ $6' $XVWUDOLDQ 6LJQDOV 'LUHFWRUDWH ‰ (8 *'35 (XURSHDQ 8QLRQ *HQHUDO 'DWD 3URWHFWLRQ 5HJXODWLRQ ‰ ,62 VHULHV

0,67UDLQLQJ,QVWLWXWH ,QF ‹,QQRYDWLYH,7//&

6OLGH

,7*=

0,6 7UDLQLQJ ,QVWLWXWH ,QF

3DJH

,7*=

‹ LL7 &RQVXOWLQJ

7+( $57 2) &<%(56(&85,7< 0(75,&6

Example: Audit and Compliance Metric

0,67UDLQLQJ,QVWLWXWH ,QF ‹,QQRYDWLYH,7//&

6OLGH

,7*=

0,6 7UDLQLQJ ,QVWLWXWH ,QF

3DJH

,7*=

‹ LL7 &RQVXOWLQJ