5.12 Cybersecurity (detail)

<p style='margin:0in;'><span style='font-family:Avenir Next W01; font-size:16px;'>The National Institute of Standards and Technology (NIST) provides a Cybersecurity Framework (CSF) for benchmarking and measuring the maturity level of cybersecurity programs across all industries. The City uses this framework and toolset to measure and report on its internal cybersecurity program.</span></p><p style='margin:0in;'><br />&nbsp;</p><p style='margin:0in;'><span style='font-family:Avenir Next W01; font-size:16px;'>The foundation for this measure is the Framework Core, a set of cybersecurity activities, desired outcomes, and applicable references that are common across critical infrastructure/industry sectors. These activities come from the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) published standard, along with the information security and customer privacy controls it references (NIST 800 Series Special Publications). The Framework Core presents industry standards, guidelines, and practices in a manner that allows for communication of cybersecurity activities and outcomes across the organization from the executive level to the implementation/operations level.&nbsp;&nbsp;</span></p><p style='margin:0in;'><br />&nbsp;</p><p style='margin:0in;'><span style='font-family:Avenir Next W01; font-size:16px;'>The Framework Core consists of five concurrent and continuous functions: identify, protect, detect, respond, and recover.&nbsp; When considered together, these functions provide a high-level, strategic view of the lifecycle of an organization’s management of cybersecurity risk.&nbsp; The Framework Core identifies underlying key categories and subcategories for each function, and matches them with example references, such as existing standards, guidelines, and practices for each subcategory.&nbsp;</span></p><p style='margin:0in;'><br />&nbsp;</p><p style='margin:0in;'><span style='font-family:Avenir Next W01; font-size:16px;'>This page provides data for the Cybersecurity performance measure.</span></p><p style='margin:0in;'><br />&nbsp;</p><p style='margin:0in;'><span style='font-family:Avenir Next W01; font-size:16px;'>Cybersecurity Framework (CSF) scores by each CSF category per fiscal year quarter (Performance Measure 5.12)</span></p><p style='margin:0in;'><br />&nbsp;</p><p style='margin:0in;'><span style='font-family:Avenir Next W01; font-size:16px;'>The performance measure dashboard is available at&nbsp;</span><a target='_blank' href='https://financial-stability-and-vitality-tempegov.hub.arcgis.com/pages/cyber-security' rel='nofollow ugc noopener noreferrer'>5.12 Cybersecurity</a><span style='font-family:Avenir Next W01; font-size:16px;'>.</span></p><p style='margin:0in;'><br />&nbsp;</p><p style='margin:0in;'><span style='font-family:Avenir Next W01; font-size:16px;'>Additional Information</span></p><p style='margin:0in;'><span style='font-family:Avenir Next W01; font-size:16px;'>Source: Maturity assessment /</span><a target='_blank' href='https://www.nist.gov/topics/cybersecurity' rel='nofollow ugc noopener noreferrer'>https://www.nist.gov/topics/cybersecurity</a></p><p style='margin:0in;'><span style='font-family:Avenir Next W01; font-size:16px;'>Contact: Scott Campbell</span></p><p style='margin:0in;'><span style='font-family:Avenir Next W01; font-size:16px;'>Contact E-Mail: Scott_Campbell@tempe.gov</span></p><p style='margin:0in;'><span style='font-family:Avenir Next W01; font-size:16px;'>Data Source Type: Excel</span></p><p style='margin:0in;'><span style='font-family:Avenir Next W01; font-size:16px;'>Preparation Method: The data is a summary of a detailed and confidential analysis of the city's cybersecurity program. Maturity scores of subcategories within NIST CFS are combined, averaged, and rolled up to a summary score for each major category.</span></p><p style='margin:0in;'><span style='font-family:Avenir Next W01; font-size:16px;'>Publish Frequency: Annual</span></p><p style='margin:0in;'><span style='font-family:Avenir Next W01; font-size:16px;'>Publish Method: Manual</span></p><p style='margin:0in;'><a target='_blank' href='https://tempe.gitbook.io/data-dictionary/business-and-economy/5.12-cyber-security' rel='nofollow ugc noopener noreferrer'>Data Dictionary</a><br />&nbsp;</p>

Tags: customer-privacy, cyber-security, cybersecurity, cybersecurity-pm-5-12, financial-stability-and-vitality, hacker-detection-and-prevention, harden-critical-infrastructure-assets, information-security, infosec, performance-measures, prevent-data-breach, protect-assets, regulatory-compliance
Organization: City of Tempe