Topic Statement

Frameworks, like the EBK, are usually models applied to organizations in the real world. All frameworks cannot be implemented in the same way to all organizations since not all organizations are alike.

Discuss

Compare and contrast the three major categories of roles and responsibilities as defined by the EBK. Give examples of the responsibilities of these roles as defined by the EBK. In your comparison answer the following questions:

What roles and/or responsibilities would you change, combine, add, or delete in the EBK example of a cybersecurity framework when applied to a particular organization, or type of organization in the real world?

How do the competencies defined by EBK support Information Security?