NIST 800-37 and the NIST Cyber Security framework

CISM Domain 1: Information Security Governance

CISM Domain 1 - What we will be covering (3:28)
Governance vs. Management (8:21)
Standards and frameworks (11:11)
Information Security Governance Values, vision, mission, and plans (9:18)
Information Security Governance Policies, procedures, guidelines, and frameworks (13:19)
Gap Analysis (3:19)
SWOT Analysis (3:16)
OPEX, CAPEX, and fiscal years (4:01)
KGIs, KPIs, and KRIs (4:08)
The CIA triad - Part 1 - Confidentiality, Integrity, and Availability (11:34)
The CIA triad - Part 2 - Confidentiality, Integrity, and Availability (11:12)
The 3 states of data (data at rest, data in motion, and data in use) (8:32)
Data classification and clearance (6:57)
Data handling, data storage, and data retention (9:56)
Mission, data, system owners, and data custodians (8:54)
Ethics (6:30)
Laws and regulations (7:21)
Laws and regulations - Evidence (9:45)
US laws, European laws, and international treaties (9:42)
GDPR (General Data Protection Regulation) (9:21)
International agreements and guidelines (4:47)
Intellectual property (7:23)
Administrative personnel controls (15:52)
COBIT5 (7:17)
ISO 27001 and 27002 (1:54)
NIST 800-53 (10:34)
NIST 800-37 and the NIST Cyber Security framework (12:15)
RACI charts (Responsible, Accountable, Consulted, Informed). (3:30)
GRC - Governance, Risk Management, and Compliance. (9:19)
Data security frameworks (4:10)
Data Protection (9:12)
Security models and concepts - introduction (6:06)
Security models and concepts - part 1 (7:07)
Security models and concepts - part 2 (12:45)
Artificial intelligence (AI) (5:13)
CISM Domain 1 - What we covered (1:14)

CISM Certification: CISM Domain 1 Video Boot Camp

NIST 800-37 and the NIST Cyber Security framework