Question

Discuss in detail, why the EBK generic framework is insufficient to meet all of the information security needs of an organization.

Answer 1

The EBK is designed for use across the public and private sectors. When coming to the initial versions of EBK is not applicable. Some of the concepts are not included because of that it becomes insufficient like certification and accrediation that means it is not included as a function within competancy. vulnerability and assessment language and configuration management via security technical implementation guides are not included in it. If these items are included EBK would have been very much better.