Building an Effective Security Program

Chris K. Williams; Scott E. Donaldson; Stanley G. Siegel

Published by De Gruyter 2020

Building an Effective Security Program

Chris K. Williams , Scott E. Donaldson and Stanley G. Siegel

https://doi.org/10.1515/9781501506529

Overview
Contents

About this book

Building an Effective Security Program provides readers with a comprehensive approach to securing the IT systems in use at their organizations. This book provides information on how to structure and operate an effective cybersecurity program that includes people, processes, technologies, security awareness, and training. This program will establish and maintain effective security protections for the confidentiality, availability, and integrity of organization information. In this book, the authors take a pragmatic approach to building organization cyberdefenses that are effective while also remaining affordable.

This book is intended for business leaders, IT professionals, cybersecurity personnel, educators, and students interested in deploying real-world cyberdefenses against today’s persistent and sometimes devastating cyberattacks. It includes detailed explanation of the following IT security topics:

IT Security Mindset—Think like an IT security professional, and consider how your IT environment can be defended against potential cyberattacks.

Risk Management—Identify the assets, vulnerabilities and threats that drive IT risk, along with the controls that can be used to mitigate such risk.

Effective Cyberdefense—Consider the components of an effective organization cyberdefense to successfully protect computers, devices, networks, accounts, applications and data.

Cyber Operations—Operate cyberdefense capabilities and controls so that assets are protected, and intruders can be detected and repelled before significant damage can be done.

IT Security Awareness and Training—Promote effective cybersecurity practices at work, on travel, and at home, among your organization’s business leaders, IT professionals, and staff.

Resilient IT Security—Implement, operate, monitor, assess, and improve your cybersecurity program on an ongoing basis to defend against the cyber threats of today and the future.

Building an Effective Security Program:

-Uses everyday language to de-mystify the subject.

-Along with experience, helps to reduce common risks.

-Outlines how to protect the confidentiality, availability, and integrity of company information.

Author / Editor information

Chris K. Williams, Leidos, USA; Scott E. Donaldson, Johns Hopkins University, USA; Stanley G. Siegel, Johns Hopkins University, USA

Topics

Frontmatter Publicly Available Download PDF	I
Acknowledgments Publicly Available Download PDF	VII
About the Authors Publicly Available Download PDF	IX
Contents Publicly Available Download PDF	XI
Introduction Publicly Available Download PDF	XV
Chapter 1. The Digital Organization Requires Authentication Unlicensed Licensed Download PDF	1
Chapter 2. Ever-Present Cyber Threats Requires Authentication Unlicensed Licensed Download PDF	16
Chapter 3. Cyber Risk Management Requires Authentication Unlicensed Licensed Download PDF	41
Chapter 4. Cyberdefense Concepts Requires Authentication Unlicensed Licensed Download PDF	55
Chapter 5. Cybersecurity Drivers Requires Authentication Unlicensed Licensed Download PDF	80
Chapter 6. Cyber Program Management Requires Authentication Unlicensed Licensed Download PDF	95
Chapter 7. Cybersecurity Capabilities Requires Authentication Unlicensed Licensed Download PDF	118
Chapter 8. Cybersecurity Operations Requires Authentication Unlicensed Licensed Download PDF	162
Chapter 9. Cyber Awareness Requires Authentication Unlicensed Licensed Download PDF	193
Chapter 10. Organization Cyber Awareness Requires Authentication Unlicensed Licensed Download PDF	210
Chapter 11. Cyber Training Requires Authentication Unlicensed Licensed Download PDF	242
Chapter 12. Measuring Cyber Performance Requires Authentication Unlicensed Licensed Download PDF	257
Chapter 13. When Things Go Wrong Requires Authentication Unlicensed Licensed Download PDF	286
Chapter 14. Looking to the Future Requires Authentication Unlicensed Licensed Download PDF	340
Appendix A: Common Malware Threats Requires Authentication Unlicensed Licensed Download PDF	355
Appendix B: Cyber Awareness and Cyber Training Topics Requires Authentication Unlicensed Licensed Download PDF	365
Appendix C: Example Cyber Policy Requires Authentication Unlicensed Licensed Download PDF	371
Appendix D: Online Cybersecurity Resources Requires Authentication Unlicensed Licensed Download PDF	393
Glossary Requires Authentication Unlicensed Licensed Download PDF	407
Index Requires Authentication Unlicensed Licensed Download PDF	419

(Deutsch)

Language: English
Publisher: De Gruyter
Audience: IT personnel and managers
Pages
- Front matter: 19
- Main content: 425
Illustrations
- Illustrations: 79
- Tables: 1
Keywords: Security; Cybercrime; Cybersecurity; Phishing; Hacking; Cyber Threat; Virus

eBook

Published: September 21, 2020
ISBN: 9781501506529

Paperback

Published: September 21, 2020
ISBN: 9781501515248