Indonesian Financial Services Authority
Steps need to be done in the maturity assessments are, among others:
Utilization of standardized assessment tools
1.
a) Use the BSSN Cyber Security Maturity Assessment (CSMA) to evaluate cybersecurity capabilities across various domains and identify areas for improvement; or b) Use the CREST 8 model to assess the maturity of cyber threat intelligence (CTI) capabilities. CREST helps determine the FSTI Provider’s current state in reacting to and managing cyber threats, aligning CTI with business needs, and integrating CTI into broader security practices; or c) Use NIST’s Cybersecurity Framework (CSF) for a structured approach to assessing cybersecurity maturity. NIST’s CSF helps identify weaknesses in the five core functions: Identify, Protect, Detect, Respond, and Recover.
8 CREST Cyber Threat Intelligence Maturity Assessment Tools, https://www.crest-approved.org/buying- building-cyber-services/cyber-threat-intelligence-maturity-assessment-tools/; also see: https://www. nccoe.nist.gov/financial-services
65
Made with FlippingBook. PDF to flipbook with ease