A security breach is not only devastating to a company’s reputation but can also be very expensive. Over the past several years, the average cost of a data breach has been well over $3.5 million. During this training you will be introduced to the National Institute of Standards and Technology’s security and privacy framework, NIST 800-53. The purpose of the framework is to provide a robust list of controls to ensure the stability, security and resiliency of information systems. Throughout this course we will discuss strategies for protecting assets, preventing downtime and increasing control awareness and adoption.

The Information Technology Governances are plentiful: Payment Card Industry Data Security Standard (PCI), Health Insurance Portability and Accountability Act (HIPAA), Cybersecurity Maturity Model Certification (CMMC), Health Information Trust Alliance Common Security Framework (HITRUST), Sarbanes Oxley, SSAE18 SOC2 for 3rd party service providers and most recently the National Cybersecurity Plan - 2023 Cybersecurity Strategy. During this course we will discuss NIST (National Institute of Standards and Technology) controls and how a single framework can be implemented to help ensure compliance with all corresponding governances.

Course Key Concepts: Compliance, Security, Cybersecurity, NIST, PCI, HIPAA, SOC2, CMMC, IT.