OWASP Open Cyber Security Framework Project

=Main=



{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
 * valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

OWASP Open Cyber Security Framework Project
The OWASP Open Cyber Security Framework Project's aim is to create a practical framework for Cybersecurity. Currently there are some frameworks from NIST or from ISACA for example and other paid or local frameworks, but there is no open framework that any governments or organization are able to adopt.

Introduction
Creating, Implementing and managing Cybersecurity Framework has become a need (or may be a must) for many governments and organizations. The Open Cybersecurity Framework Project (OCSFP) is an open project dedicated to enabling organizations to conceive or improve a Cybersecurity Framework. All of the information in OCSFP are free and open to anyone. Everyone is invited to join and collaborate in order to improve all the stuff that would be available worldwide. It is licensed under the Creative Commons Attribution-ShareAlike 3.0 license, so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

Main Projects
Open Cybersecurity Frameworks Documentation Templates Open Cybersecurity Awareness
 * Open Cybersecurity Framework Core Hot!
 * Open Cybersecurity Framework Core Implementation Guidelines
 * Open Cybersecurity Framework for IPv6
 * Open Cybersecurity Framework for Governments
 * Open Cybersecurity Framework for Enterprises
 * Open Cybersecurity Framework for Critical Infrastructure
 * Open Cybersecurity Framework for Aeronautics
 * Open Cybersecurity Framework for Oil & Gas
 * Open Cybersecurity Framework for Healthcare
 * Open Cybersecurity Framework for Telcos
 * Open Cybersecurity Assessment
 * Open Cybersecurity Quick Self-Assessment Hot!
 * Open Cybersecurity Quick Reference Guide
 * Open Cybersecurity Free Tools
 * Open Cybersecurity Incident Response Management Framework
 * Open Cybersecurity Framework for Small Biz
 * Open Cybersecurity Initial Assessment
 * Open Cybersecurity Core Implementation Review
 * Open Cybersecurity Risk Management Review
 * Open Cybersecurity Vulnerability Management Review
 * Open Cybersecurity Data Loss Prevention Management Review
 * Open Cybersecurity Maturity Model (OCMM) Hot!
 * Presentations
 * Open Cybersecurity Awareness Annual Plan Training
 * Flyers
 * E-mail Templates
 * Marketing Campaigns
 * Tip of the day
 * Developmental Metrics

Licensing
OWASP Open Cyber Security Framework Project is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.


 * valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

What is the OWASP Open Cyber Security Framework Project?
OWASP Open Cyber Security Framework Project provides:

OCSFP is an open community dedicated to enabling organisations to conceive or improve a Cyber Security Framework. All of the information in OCSFP are free and open to anyone.

The mission is to be the Best Practice for Cybersecurity Framework for both public and private organizations worldwide.

Presentation
Link to presentation

Project Leader

 * Mateo Martinez

Related Projects

 * OWASP_CISO_Survey


 * valign="top" style="padding-left:25px;width:200px;" |

Quick Download

 * Main Web

Mailing List

 * Mailing List

Classifications

 * }

=FAQs=

= Acknowledgements =

Volunteers
= Road Map and Getting Involved = As of February 2014, the priorities are:

The project roadmap is to generate, review and publish the following documents before end 2015:

Main Projects
 * Open Cybersecurity Frameworks
 * Open Cybersecurity Framework Core Hot!
 * Open Cybersecurity Framework Core Implementation Guidelines
 * Open Cybersecurity Framework for IPv6
 * Open Cybersecurity Framework for Governments
 * Open Cybersecurity Framework for Enterprises
 * Open Cybersecurity Framework for Critical Infrastructure
 * Open Cybersecurity Framework for Aeronautics
 * Open Cybersecurity Framework for Oil & Gas
 * Open Cybersecurity Framework for Healthcare
 * Open Cybersecurity Framework for Telcos
 * Open Cybersecurity Assessment
 * Open Cybersecurity Quick Self-Assessment Hot!
 * Open Cybersecurity Quick Reference Guide
 * Open Cybersecurity Free Tools
 * Open Cybersecurity Incident Response Management Framework
 * Open Cybersecurity Framework for Small Biz

Documentation Templates
 * Open Cybersecurity Initial Assessment
 * Open Cybersecurity Core Implementation Review
 * Open Cybersecurity Risk Management Review
 * Open Cybersecurity Vulnerability Management Review
 * Open Cybersecurity Data Loss Prevention Management Review
 * Open Cybersecurity Maturity Model (OCMM) Hot!
 * Open Cybersecurity Awareness

Presentations
 * Open Cybersecurity Awareness Annual Plan Training
 * Flyers
 * E-mail Templates
 * Marketing Campaigns
 * Tip of the day
 * Developmental Metrics

Involvement in the development and promotion of the project is actively encouraged! You do not have to be a security expert in order to contribute. Some of the ways you can help:
 * Translations
 * Industry Verticals Recommendations and Case Study

=Project About=