TIM-7040

Axelos. (n.d.). What is IT service management? https://www.axelos.com/certifications/itil-service-management/what-is-it-service-management
IT Service Management (ITSM) is a concept that enables an organization to maximize business value from the use of information technology. ITIL® 4 is the framework for the management of IT-enabled services.

Caltagirone, S., Pendergast, A., & Betz, C. (2013, July 5). The diamond model of intrusion analysis. Active Response. https://www.activeresponse.org/wp-content/uploads/2013/07/diamond.pdf
The Diamond Model of Intrusion Analysis is a model that gives analysts a comprehensive view of cyber-attacks. It contains 4 parts: adversary, infrastructure, capability, and target.

COBIT – An ISACA Framework (2019). Effective IT governance at your fingertips. https://www.isaca.org/resources/cobit
The COBIT® ISACA® Framework is used to address IT governance within the organization to manage information technology resources that are important to the success of the organization. The COBIT 2019 Toolkit is useful to organizations seeking to implement and optimize an IT governance solution.

Langford, M. (2020). Cyber risk management: Strategic plan or afterthought? ISSA Journal, 18(10), 18–21.
The article looks at the state of cyber risk management as of October 1, 2020, and the emerging factors that can motivate organizations to invest in their cyber defenses to protect their data assets. Topics discussed include security spending of organizations in 2019, the lack of federal cyber security legislation in the U.S., and the use of cybersecurity investment as a competitive advantage.

National Institute of Standards and Technology (NIST). (2018, April). Framework for improving critical infrastructure cybersecurity. https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04162018.pdf
The NIST Cybersecurity Framework (CSF) focuses on using business drivers to guide cybersecurity activities and considering cybersecurity risks as part of the organization's risk management processes. The Framework consists of three parts: the Framework Core, the Implementation Tiers, and the Framework Profiles. The Framework Core is a set of cybersecurity activities, outcomes, and informative references that are common across sectors and critical infrastructure. Elements of the Core provide detailed guidance for developing individual organizational Profiles.

National Institute of Standards and Technology. (2021, August). NIST risk management framework. https://csrc.nist.gov/projects/risk-management/about-rmf
The NIST RMF is important because managing organizational risk is paramount to effective information security and privacy programs; the RMF approach can be applied to new and legacy systems, any type of system or technology (e.g., IoT, control systems), and within any type of organization regardless of size or sector.

Reciprocity. (2021, November 29). Complete guide to NIST: Cybersecurity framework, 800-53, 800-171. https://reciprocity.com/resource-center/complete-guide-to-nist-cybersecurity-framework-800-53-800-171/
IT framework is a valuable tool for organizations assessing risk and security. It is important to understand how to mitigate risk by selecting an appropriate IT framework.

U.S. Department of Health & Human Services. (2022, October 25). Cyber security guidance material. https://www.hhs.gov/hipaa/for-professionals/security/guidance/cybersecurity/index.html
This website provides educational materials specifically designed to give HIPAA-covered entities and business associates insight into how to respond to cyber-related security incidents.

Agutter, C. (2021). Service integration and management (SIAM™) foundation body of knowledge (BoK) (2nd ed.). IT Governance Publishing
SIAM™ is a management methodology. It provides service organizations with governance, management, integration, assurance and coordination to ensure continuous improvement.

Scarfone, K. (2022, September). How to develop a cybersecurity strategy: Step-by-step guide. https://www.techtarget.com/searchsecurity/tip/How-to-develop-a-cybersecurity-strategy-Step-by-step-guide
It is important to know basic steps in developing an effective security strategy. Agility in Cybersecurity is increasingly important due to budgeting, economic, and hiring constraints. It is important to update strategies as cyber threats and security technologies change and enterprises acquire new technology assets.

Stanger, J. (2023, June 25). Think like a hacker: 3 cybersecurity models used to investigate intrusions.https://www.comptia.org/blog/think-like-a-hacker-3-cybersecurity-models-used-to-investigate-intrusions
The Computing Technology Industry Association (CompTIA) is one of the leading global IT education, training, and certification organizations in the world. An appropriate model will help to visualize the big picture and contextualize the small details. The big three cybersecurity model industry standards are introduced and how to select the appropriate model.

Viegas, V. & Kuyucu, O. (2022). IT security controls: A guide to corporate standards and frameworks. Apress
Organizations must increasingly demonstrate to their customers that they have sufficient protection, security, resilience, and privacy of their information, assets and systems, based on best practices created by International information security standards.