TIM-6755 V1

National Institute of Standard and Technology. (n.d.). Computer security resource center.
The document (NIST SP 800-79-2) listed on the website reviews the possible decisions made by regulatory authorities that demonstrate the extent that an organization has completed all assessment activities leading to an authority to operate. Specifically, it includes Chapter 2, Preparation for Assessment and Authorization; Chapter 3, Taxonomy of Issuer Controls; Chapter 4, Issuer Controls Assessment and Authorization Decision Process; and Chapter 5, Assessment and Authorization Lifecycle is relevant to the assignment. The appendices contain helpful templates for plans and reporting. This document is a valuable tool to have as a reference.

U.S. Government Accountability Office. (2018, July 25). High-risk series: Urgent actions are needed to address cybersecurity challenges facing the nation.
This 41-page report (PDF) details the results of a study on the cybersecurity of federal and local systems in the nation’s infrastructure, including energy, transportation systems, communications, and financial services which are dependent on information technology systems to carry out operations. The best practices and recommendations made by the GAO are provided.

U.S. Department of Health & Human Services. (n.d.). The security rule. HHS.
This web page provides background information on The Security Rule, which requires that all healthcare system providers ensure the confidentiality, integrity, and security of electronically protected health information (e-PHI) through the use of appropriate administrative, physical, and technical measures.

Zrahia, A. (2018). Threat intelligence sharing between cybersecurity vendors: Network, dyadic, and agent views. Journal of Cybersecurity, 1.
This article stresses the importance of sharing threat intelligence between vendors to limit the duplication of effort and allowing the knowledge gained by one organization to prevent attacks for other organizations.

Siegel, C. A., & Sweeney, M. (2020). Cyber strategy: Risk-driven security and resiliency. Auerbach Publications.
This e-book describes cybersecurity strategies using several industry-standard frameworks discussed in this class. Some of the topics detailed are cyber risks and controls, current and target statement assessments, and measuring cybersecurity plan performance. This e-book is a valuable tool to have as a reference and specific chapters are valuable resources for the weekly assignments.