Question

With ISO 27002, ITIL, CobiT, NIST 800-53 controls available, can you identify the most appropriate control set for your organization (or industry, as you choose)? Upon what do you base your choice? If none of those sets work for you, what controls can you propose? If you already have a set of controls in place, identify them and discuss why your organization selected that set.

Answer 1

Control set for the company could be chosen any among of the options provided above which are ISO 27002, ITIL, CobiT and NIST 800-53 based on the requirement. Functions of all the controls are listed below.

ISO 27002 control are used with a fixed attention in which the focus to make an information security for an organization and when we want to implement those controls, we use ISO 27002.

COBIT is the main business structure for the administration and the board of big business IT. It is the result of a worldwide team and improvement group from ISACA, a philanthropic, autonomous relationship of in excess of 140,000 administration, security, hazard and confirmation experts in 187 nations. COBIT fuses the most recent reasoning in big business administration and the executives procedures, and gives all inclusive acknowledged standards, rehearses, logical instruments and models to help increment the trust in, and esteem from, data frameworks.

ITIL can profit any association that gives an IT benefit the board (ITSM) item or administration. As a lot of practices that confers reasonable and key direction for ITSM, ITIL is utilized as a manual for help bunches enhance the estimation of their administrations by concentrating on illuminating business issues as opposed to simply enhancing IT abilities. Associations use ITIL as a system for enhancing or executing capacities that will give explicit business esteem.

NIST 800-53 is a production that prescribes security controls for government data frameworks and associations and reports security controls for all administrative data frameworks, with the exception of those intended for national security.

NIST 800-53 is distributed by the National Institute of Standards and Technology, which makes and advances the gauges utilized by government organizations to execute the Federal Information Security Management Act (FISMA) and oversee different projects intended to ensure data and advance data security.