Prioritizing IT Controls for Effective, Measurable Security
July 2013 • White Paper
Daniel Phelps, Gene Kim (IP Services and ITPI), Kurt Milne
In this paper, the authors summarize results from the IT Controls Performance Study conducted by the IT Process Institute.
Publisher:
CERT
Abstract
This article summarizes results from the IT Controls Performance Study conducted by the IT Process Institute. The article describes what differentiates high performing organizations in IT and security from others and identifies six foundational controls that are deployed by these organizations.