The NIST Cybersecurity framework outlines 5 functions (Identity, Protect, Detect, Respond and Recover) that an organization should focus on. As a security practitioner, do you think this framework can be achieved as organizations migrate to cloud services when internal IT governance is missing?

Describe the concept of network segmentation in cybersecurity. How can network segmentation be used to enhance security in an organization's IT infrastructure?

The main goal of any IT security policy is to protect confidentiality, integrity, and availability (CIA) of data. One reason to have the BYOD security policy is to identify devices that introduce unnecessary vulnerabilities to the organization's computing resources. How is timely discovery of such vulnerabilities will reduce the attack vector on an organization's computing resources?