best practice --- There is no riddle. You have misunderstood what cyber secuirty best practice means and entails and this has NOTHING to do with defintiions. Your misunderstanding stems from the clear divide between theory and practice. As we say in German paper is patient and everyone can write anything they want in particular about cyber. The reality is that 80% of the great theoretical advice fails in the field. Once the cyber criminals attack and your entire infrastructure is crippled and your data and back-ups are encrypted, all these wonderful theories become null and void. This is the moment tht you need best practices: how have others in the field dealt with such an attack? What mechanisms were used? How to conduct forensic? Who is the best for this problem? Who is the best perpetrator negotiator? etc, etc. Strategies, theories, CBMs, etc. all of this is nice to have but they are not tailored for the real and brutal world of cyber. ONLY best practice help here.

Source author: Stefanie Frey stefanie.frey@deutor.de