Improvement of the Verity Security ESPM
Donation protected
The Enterprise Security Profile Model (ESPM) is free to download for public use, distribution and modify. Please return all updates to the source as noted in the license agreement. Contact Verity Security, LLC for improved implementation and use of the tool.
The fundraising will allow the ESPM to be converted from a spreadsheet into a web-based program which allows contributors to configure the mapping of security controls and view the security control measurements and metrics for an environment.
The mapping, measurement and metrics of the ESPM provides a line-of-sight from the executive management perspective to the operational activities where the security controls are needed.The ESPM aligns multiple security control sets to the NIST Cyber Security Framework. All of the security controls, regardless of the origin, are measured within their unique environment in order to provide a consistent security profile for the entire enterprise.
The fundraising will allow the ESPM to be converted from a spreadsheet into a web-based program which allows contributors to configure the mapping of security controls and view the security control measurements and metrics for an environment.
The mapping, measurement and metrics of the ESPM provides a line-of-sight from the executive management perspective to the operational activities where the security controls are needed.The ESPM aligns multiple security control sets to the NIST Cyber Security Framework. All of the security controls, regardless of the origin, are measured within their unique environment in order to provide a consistent security profile for the entire enterprise.
Organizer
Kent Pankratz
Organizer
Nauvoo, IL