This webinar was recorded with H-ISAC on July 18th, 2024.
Watch the Replay:
We didn't get to everyone's questions during our Live section, so here are some answers for you!
Q: Where does a company go to obtain benchmark data?
A: Reveal Risk has a lot of pharmaceutical, healthcare, and life sciences data but we haven’t found a universal “public” benchmarking database (that would be too easy!).
To better provide benchmarking data, we’re keeping out CISO/Leader survey open for a little longer. We’d love to get a few more responses and we will share our results to the H-ISAC community soon!
Q: How do CIS Controls help drive actionable items? Do you believe CIS Controls pair well with NIST CSF?
A: NIST provides direct mapping from CSF to CIS controls. We recommend using CIS Controls as an informative reference framework for NIST CSF.