NIST CSF 2.0 Framework Training - IT/Cybersecurity Audit and Compliance Training

[@bartoszc3514]

Excellent material! So informative…! I must follow you in other social media’s to see what other lessons and advices. Thank you so much for your time and effort on the preparation of this webinar.

[@michaeloridamisi1447]

Thanks a lot ma’am 🎉 Coming from the 3 days training

[@ThisIsPreciousA]

Starting my learning journey in the GRC space without any background in Cybersecurity. This is the second video I am watching on GRC and I must say you explained this framework in a way that is easy to understand. Thank you

[@YourITCareer]

Thanks!

[@Abu_Maher]

You are an Amazing Educator and Trainor. I really enjoyed watched your IT/Cybersecurity and CSF Tutorial videos. They are so perfect and easily digestible. Wish to watch your complete Tutorial video about IT Audit Fundamentals course.

[@mustaphabisiriyu911]

peju honestly your the best I like the way you break down the frameworks and give confidence to people listening to you. thank you

[@thesidegig]

Great presentation Peju, I am currently scoping a Framework for a large project, so your presentation was very informative. Keep up the good work 👍🏾😉

[@OfflineSetup]

what a clear and concise presentation!

[@ahmadfahmi79]

I love your commitment to share this content! Keep it up Peju! Great content, great sharing!

[@mosunabdulai777]

She's awesome ❤

[@abdullahrayhangofur7483]

how can I get hands on IT Audit before joining to a job as they are asking about the hands on

[@obinnanwosu7110]

Great delivery . More of your great works.

[@anshikabasandani5778]

Extremely informative and very helpful!

[@YourITCareer]

Glad it was helpful!

[@dmnick123ify]

Thanks for the video. So I have a very important question. With NIST CSF, without a community profile, how can you really determine the controls needed for your Target profile??? Or should organizations always look for a community profile to use as baseline? For example, with NIST RMF, I know that I would categorize the system, and based on the High Water mark, I will select my control baseline from 800-53, then tailor if need be. But atleast the categorize process would help me to know the controls or baseline or Target that applies. Moreover, with CIS baselines, I can decide that, perhaps, I want to select IG1, IG2, or IG3, depending on my cyber maturity, and Im confident about which controls those come with. Another example....with NIST 800-171 for instance, which pretty much is prescriptive, I know with Level 2, I have 110 controls to adhere to, so any gap analysis I would perform would be against that. However with NIST CSF, Im still not absolutely sure how we arrive at what the Target Proile is supposed to be. Or are you saying the security personnel can randomly pick what controls they think suit the organization?? I hope you understand my ask.

[@germainkone9029]

Nice one again. Time to time post IT class as well. Too many NIST CSF 2.0 out there. Missing IT Audit session out there that last for 60 minutes and so. Thanks

[@YourITCareer]

More to come! This NIST training is different from the others though.

[@germainkone9029]

Nice to hear ! Thanks 🙏

[@jahbyke]

Great content and delivery! Thanks so much. Will have no choice but to subscribe to your channel. You're a great tutor!❤

[@bluewaterssolutions1926]

Brilliant Delivery

[@habtamuhaile7638]

Thank you peju

[@YourITCareer]

You're welcome

[@youngchapo3513]

Thank you

[@living4YAHonly]

Do you have a completed example risk assessment for a (updated on 10/11 for clarity) fictional customer you can share?

[@YourITCareer]

Sorry, I can't share customer information. Thanks.

[@living4YAHonly]

@@YourITCareer I was referring to a fictional customer. If you have one, great, if not no worries.

[@angshujasengupta]

Can you share this ppt?

[@YourITCareer]

Hello. No, we can't. Thanks.

[@informix254]

Grc