To foster and develop national preparedness and encourage the exploration of risk related interdependencies across the public and private sectors of the critical infrastructure, DHS established a Cross-Sector Cyber Security Working Group in 2007. One of the key outcomes of this group was the establishment of the National Infrastructure Protection Plan (NIPP) and the Risk Management Framework.
A. What are the elements of the Risk Management Framework?
B. Why should organizations consider the use of that framework for a cybersecurity program?