Isoiec 27031 describes the concepts and ideas of

ISO/IEC 27031
Describes the concepts and ideas of records and
communication technology (ICT) readiness for business
continuity, and gives a framework of strategies and approaches
to pick out and specify all elements for improving an enterprise's
ICT readiness to make sure business continuity.
Encompasses all occasions and incidents (which includes
security associated) that could have an impact on ICT
infrastructure and systems.
ISO/IEC 27032 Gives steering for improving the country of Cyber security,
drawing out the particular components of that hobby and its
dependencies on other safety domain names, mainly:
• records protection,
• network safety,
• net security, and
• Crucial facts infrastructure safety (CIIP).
Activity 4: Identify core components and implementation tiers of the framework
according to organisational requirements.

This part of the activity requires you to identify core components and implementation tiers of
the framework according to organisational requirements and document the outcomes using
‘Template 4’.
Description of the activity
This activity is a continuation of Activity 3.
This activity requires you to identify core components and implementation tiers of the
framework according to organisational requirements based on the information provided in the
case study.
To do so you need to:
• Identify the core components of the framework according to organisational
requirements and document using template 5.
• Identify the below four (4) implementation tiers of the framework according to
organisational requirements and document using Template 5:
o Tier 1 – Partial
o Tier 2 – Risk-Informed
o Tier 3 – Repeatable
o Tier 4 – Adaptive

Template 4: Core components and implementation tiers of the framework according to
organisational requirements.

_v1
Core components of cyber security framework (150-200 words)
1
Identify goals:
This element is used to decide the cyber-security goals that a enterprise need to gain. Each
organization's identified dreams might be precise. Includes figuring out an agency’s
essential capabilities and what cyber-security dangers should disrupt the ones capabilities.
Additionally, detecting contemporary dangers, existing virtual property, and organizational
roles are all crucial factors of this step.
Set guideline
In this step of a cyber-security framework, a complete description of activities, tactics, and
movements that serve to fulfill the dreams outlined inside the identification level is set up.
This stage need to also include techniques for prioritizing desires as well as defining roles
and obligations for every established aim.
Implement:
This is the framework's movement degree whilst every aim is applied inside the agency
infrastructure. Because carried out cyber-security methods occasionally include numerous
areas or departments and conversation is crucial at this stage.