From the course: Security Frameworks Fundamentals
Join today to access over 26,100 courses taught by industry experts.
The assurances
From the course: Security Frameworks Fundamentals
The assurances
- [Narrator] Now that you have decided on your core security set and how to measure it, it is time to prove that you have done what you said you would do. An assurance is a positive declaration intended to give confidence. Evidence is anything presented in support of an assertion. It is the available body of facts indicating whether a proposition is valid. If I'm implementing configuration management, I'd need to determine how to prove I have executed on the measures I outlined for the controls. Evidence is a great way to provide assurance. If you have to measure for baseline configurations, the evidence could be a documented baseline that aligns to the CIS benchmarks, or if you have a measure for configuration change control, the evidence might be documented change tickets that show an approval process and segregation of duties. Finally, if you have a measure for periodic review of least functionality, the proof might…
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.