Digital Asset Valuation and Cyber Risk Measurement

Chapter 5

Economic Modeling and the Implementation of Effective Mitigating Controls

Abstract

This chapter presents different types of security and risk controls, control frameworks, models in use for measuring cost and benefits of controls, and methods for developing security performance metrics.

Keywords

Security and risk control framework; measuring cost of controls; measuring benefits of controls; cost effectiveness of controls; security performance metrics

Chapter Outline

• 5.1 Definition of Control and Types of Controls 87
  • 5.1.1 Definition of Control 87
  • 5.1.2 Types of Control 88
    • 5.1.2.1 Control Objectives for Information and Related Technology 89
    • 5.1.2.2 NIST SP 800-53 90
    • 5.1.2.3 Committee of Sponsoring Organizations of the Treadway Commission ...