Wong, William, Alomari, Zakaria, Shao, Yunlong, and Satti, Muhammad (2024) Knowledge Graph to Facilitate Cloud Security Compliance with NIST Cybersecurity Framework. In: Proceedings of the International Conference on Computer Vision and Intelligent Technology. From: ICCVIT 2024: 2nd International Conference on Computer, Vision and Intelligent Technology, 24-27 November 2024, Huaibei, China.

PDF (Published Version) - Published Version Restricted to Repository staff only

 

1

Abstract

Cybersecurity compliance has become increasingly complex due to evolving threats, overlapping standards, and rapidly changing requirements driven by emerging technologies like artificial intelligence. Organizations face significant challenges in efficiently mapping compliance requirements to specific security controls. This paper addresses this issue within the cloud industry by presenting a systematic approach to deploying a knowledge graph or ontology that maps cloud security controls at the granular implementation level to the NIST Cybersecurity Framework. Unlike previous efforts focused on high-level mappings, this approach enhances compliance efficiency and supports integration with common software languages such as HTTP and Java. The proposed methodology can also be adapted to other compliance standards.

Actions (Repository Staff Only)

Item Control Page