Notion Digital Forensics 3Cs for organisational cyber defence

29 May 2019

The Notion Digital Forensics 3C model presents a framework for organisational cybersecurity built around three foundational pillars.

1. Compliance

Organisations must select appropriate cybersecurity compliance structures. Common cybersecurity compliance standards include ISO 27001 and NIST CSF. Smaller entities may need to adapt these frameworks, focusing initial efforts on the most critical risk areas.

2. Complexity

Complexity management emphasises system simplification through three approaches:

• Maintaining only necessary systems
• Preserving essential information only
• Establishing processes to retire outdated technology

This reduces management burden and minimises security gaps from overlooked updates.

3. Culture

Culture development involves fostering workplace cyber safety through collaborative efforts. Organisations should:

• Demonstrate heightened caution regarding sensitive third-party information
• Consider system additions carefully before implementation
• Prioritise decommissioning unused systems to safeguard sensitive data

Conclusion

Addressing these three dimensions—compliance structures, system complexity, and organisational culture—enables comprehensive cybersecurity approaches that mitigate risks and protect sensitive information.