Information security maturity has never been more important. In the wake of the COVID-19 pandemic, the catalyzation of digital transformation and the ripple effects on businesses ensuring a strong cyber security posture and risk management program is essential for the new year. Too often, organizations will turn to technology investments to help enhance their security, however, as technologies have become increasingly capable, we are seeing that there is no way to use technology to protect against human error. Regulations are beginning to reflect this realization; with the Cybersecurity Maturity Model Certification (CMMC) being a landmark standard that incorporates both process and practice maturity when gauging the maturity level of a Department of Defense contractor’s security program.
Accounting for People and Process as well as Technology
As we move into a new year, organizations are still working to support the new paradigm of work that the pandemic ushered in. Specifically, security and risk teams have been working to update policies and procedures to support the rapid rise of remote work (a trend on the horizon but much like other trends accelerated by the pandemic,…
