Security frameworks (NIST, CIS, CSF) refer to industry-standard models and best practices for establishing, managing, and improving cybersecurity programs. They provide structured guidance to strengthen security posture and ensure compliance.
Very positive – Offers more flexibility & personalization19%
Somewhat positive – Could enhance security if used correctly48%
Neutral – I doubt it will significantly impact security25%
Somewhat negative – May lead to predictable patterns7%
Very negative – Complicates password creation without much benefit
Limited resources11%
Siloed data40%
Lack of leadership23%
Poor data quality & context18%
Lack of data control5%
Other (please explain in the comments)
Control frameworks18%
Program frameworks38%
Risk frameworks22%
Consultant services11%
Managed security service providers (MSSPs)5%
Other outsourcing services3%
Other