Baldrige Cybersecurity Pre-Conference Workshop

Tuesday, March 24, 2020 • 8:30 am–3:30 pm

Limited Seats Available | Reserve Early | Workshop Registration Fee: $450*

Register Online Now

Attendees at the Cybersecurity Workshop will receive a copy of the Baldrige Cybersecurity Excellence Builder. Workshop registration includes training materials and two refreshment breaks. Attendees are on their own for lunch.*Pre-Conference Workshop is an additional fee and does not include attendance at the conference.

Baldrige Cybersecurity Excellence Builder Workshop

Location: Gaylord National Harbor, National Harbor, MD, in conjunction with the 32nd Quest for Excellence Conference
NIST Presenters/Facilitators: TBA

Description
Practical, interactive workshop on using the Baldrige Cybersecurity Excellence Builder (BCEB) to

• assess the effectiveness and efficiency of your organization’s cybersecurity risk management program
• assess the cybersecurity results you achieve
• identify your priorities for improving your cybersecurity risk management efforts

The Baldrige Cybersecurity Excellence Builder is a voluntary self-assessment tool based on the Cybersecurity Framework, managed by NIST’s Applied Cybersecurity Division, and the Baldrige Excellence Framework, compiled by the Baldrige Performance Excellence Program at NIST. 

Who Should Attend:  Those in your organization who are concerned with and responsible for mission-driven, cybersecurity-related policy and operations, including board and executive management, chief security officers, chief information officers, and risk management personnel, among others.

Workshop Agenda

Background

• Introduction to NIST, Baldrige, the Cybersecurity Framework, and the BCEB

BCEB: Organizational Context 

• Hands-on practice in identifying key organizational characteristics related to cybersecurity
• Discussion of participants’ responses

BCEB: Process and Results

• Hands-on practice in assessing key cybersecurity processes and results
• Discussion of participants’ responses

BCEB: Assessment Rubric

• Hands-on practice in assessing key cybersecurity processes and results
• Discussion

Action Planning

• Moving from assessment to action
• The role of “importance”