IT UCF: Frameworks

A framework is nothing more than a structure, a set of underpinnings that you can use to ease the burden of creating a system for your policies and procedures.

Do you have to have a framework in place in order to be compliant? No. You don't. But without one in place, you won't have any guidance as to which controls you are following and which you aren't. You won't have any overall guidance to show your auditors either.

Is there a magical "one size fits all" compliance framework out there? Nope. That's why we created the Unified Compliance Framework -- to stitch all the rest of the frameworks together into a fabric that can be tailored to each and every organization as the organization sees fit.

Which frameworks are right for your organization?

Here's a listing of all of the major frameworks we've found so far. READ MORE

How do you create or customize a framework for your organization?

The good news is, it isn't that hard. The better news is, the Unified Compliance Framework has several starter kits that can move you on your way very quickly. READ MORE

How capability maturity relates to frameworks

A maturity model is a structured collection of elements that describe characteristics of effective processes. They provide a place to start, a structure for prioritizing actions, and a way to define what improvement means for an organization. Whether or not...

Why it is a bad idea to cut and paste from the standards

If you think that getting a copy of ISO 17799 or some other standard, and then cutting and pasting from it to create your "organizational policy" or "organizational standard" is a good thing, think again.

A guideline for scoping controls

Before you begin your decision process about which controls you want to add to your organizational framework, you should have a clear understanding and agree within your team about the rules of engagement for deciding which controls can be...

Analyzing the acceptance of framework controls

The first step in your analysis will be to determine if you have defined your framework correctly. We'll walk through each of the phases, beginning with scoping and ending with the selection of controls (and the documentation thereof). Gathering...

The major frameworks used for establishing IT controls

In its simplest terms, a framework is an arrangement of parts that provides a form, or structure, to the whole. A control framework is a structured way of categorizing controls to ensure the whole spectrum of control is covered adequately....