European Cybersecurity Implementation: Overview
Cybersecurity is emerging to address increases in cybercrime and, in some instances, cyberwarfare. Factors contributing to the need for improved cybersecurity include: ubiquitous broadband, IT-centric business and society, and social stratification of IT skills. To address cybercrime, many governments and institutions launched cybersecurity initiatives, ranging from guidance, through standardisation, to comprehensive legislation and regulation. ISACA has released the European Cybersecurity Implementation Series primarily to provide practical implementation guidance that is aligned with European requirements and good practice.
European Cybersecurity Implementation: Overview
This paper provides a high-level overview of implementing cybersecurity in line with existing laws, standards and other guidance. This overview paper is complemented by three detailed papers that focus on risk guidance, resilience and assurance in cybersecurity.
European Cybersecurity Implementation: Assurance
As part of the ISACA European Cybersecurity Implementation Series, this paper focuses on assurance in cybersecurity. In Europe, cybersecurity assurance is an integral part of the internal system of controls that was introduced by EU directive, and implemented subsequently as statutes in the member states.
European Cybersecurity Implementation: Resilience
As part of the ISACA European Cybersecurity Implementation Series, this paper focuses on resilience in cybersecurity. In the EU and associated countries, the concepts of resilience and cybersecurity are rapidly converging.
European Cybersecurity Implementation: Risk Guidance
As part of the ISACA European Cybersecurity Implementation Series, this paper focuses on risk guidance in a cybersecurity context, and drills down into the risk management aspects of European cybersecurity.
European Cybersecurity Audit/Assurance Program
As part of the ISACA European Cybersecurity Implementation Series, this audit/assurance program provides management with an impartial and independent assessment relating to the effectiveness of cybersecurity and related governance, management and assurance, with a focus on cybersecurity standards, guidelines and procedures as well as on implementation and governance of these activities.