Reference no: EM133241212

Case: The ISA Cybersecurity Article, "Comparing NIST & SANS Incident Frameworks" provides a very basic overview and comparison of the National Institute of Standards and Technology's Incident Framework and the SysAdmin, Audit, Network, and Security (SANS) Incident Response framework. Both frameworks provide a blueprint for ensuring cybersecurity, but the originate from vastly different organizations. SANS is a private organization which offers training, certification, and more recently, traditional education in the cybersecurity field, while NIST is a government organization with the responsibility of governing a wide range of standards and technology, ranging from a standard width for railroad track spacing to Cybersecurity Incident Response Plans. On the surface, SANS seems like a better organization to form and recommend a cyber response plan; however, this week we will look at whether or not SANS framework is superior.

You will provide an initial tread which compares and contrasts the NIST and SANS approach to establishing a Cybersecurity Incident Response Plan. This comparison needs to go beyond simply highlighting NISTs four-phases versus SANS six-phases, in favor of a comparison which looks at the frameworks for inclusivity of all of the fields within the Information Technology/Computer Science World, specifically, the Forensic aspects, or perhaps lack of, from each plan.