Standard

EBSCO Security MVP

The Security MVP: Elevating Cyber resilience, One Check at a Time

Empowering the business with data-driven decisions while exercising due dillengence and due care. "The Security MVP" isn't just about compliance; it's about reslience.

Who: President, Finance Leader, IT Leader

Measurement: Assessment against capabilities and controls

Frequency: Annually

Requirement Details: Standards Documentation

In navigating the vast amount of security controls, the Minimum Viable Product (MVP) serves as a strategic process, identifying the most crucial controls as baseline measures. While the landscape evolves, the MVP provides a starting point to mitigate cyber risks, recognizing that complete risk elimination is not feasible rather, our aim is to minimize the potential impact on the business.

The MVP serves as the cornerstone for our security assessments, enabling the identification and prioritization of risks across our business units. We are underway, aiming to complete all business units in FY24. The MVP will transition into our information security maturity model, serving as a risk indicator on our cyber scorecard, both at the business unit level and aggregated at the enterprise level.

Discipline Experts

Bryan Bee

Senior Vice President, Enterprise Applications & CISO, CORP IT

– EBSCO Industries Contact >>
Gary Hutcheson

Director, Cyber Security Operations & Compliance, CORP IT

– EBSCO Industries Contact >>