Cybersecurity GRC

Chapter 3: Cybersecurity GRC

This chapter reviews how GRC frameworks align security with business goals. GRC frameworks such as NIST SP 800-37, NIST Cybersecurity Framework (CSF), and ISO/IEC 27001 Information security management system (ISMS) help organizations align security with business goals by integrating strategic governance, risk management, and compliance into business operations.