Cyber certification group proposes ways for CISA to evaluate incident response, prevention under upcoming reporting regime

The Cybersecurity and Infrastructure Security Agency should evaluate the incident response and prevention capabilities of organizations who submit incident reports under its upcoming mandatory reporting regime through the lenses of people, process and technology, according to an international group that offers IT certifications.

“People are the most important aspect of any cybersecurity strategy. Organizations must ensure their employees are aware of cyber risks and appreciate how those risks can impact their lives,” the International Information System Security Certification Consortium (ISC2)...