Building a Comprehensive It Security Program: Practical Guidelines and Best Practices

ISBN-13: 9781484220528 / Angielski / Miękka / 2016 / 195 str.

Jeremy Wittkop

Opis

This book explains the ongoing war between private business and cyber criminals, state-sponsored attackers, terrorists, and hacktivist groups. Further, it explores the risks posed by trusted employees that put critical information at risk through malice, negligence, or simply making a mistake. It clarifies the historical context of the current situation as it relates to cybersecurity, the challenges facing private business, and the fundamental changes organizations can make to better protect themselves. The problems we face are difficult, but they are not hopeless.Cybercrime continues to grow at an astounding rate. With constant coverage of cyber-attacks in the media, there is no shortage of awareness of increasing threats. Budgets have increased and executives are implementing stronger defenses. Nonetheless, breaches continue to increase in frequency and scope.Building a Comprehensive IT Security Program shares why organizations continue to fail to secure their critical information assets and explains the internal and external adversaries facing organizations today. This book supplies the necessary knowledge and skills to protect organizations better in the future by implementing a comprehensive approach to security.Jeremy Wittkop's security expertise and critical experience provides insights into topics such as:

• Who is attempting to steal information and why?
• What are critical information assets?
• How are effective programs built?
• How is stolen information capitalized?
• How do we shift the paradigm to better protect our organizations?
• How we can make the cyber world safer for everyone to do business?
  

Recenzje

"This is an excellent book that covers all of the relevant topics needed for implementing a successful security program. The author clearly understands both security and business issues and explains the need for senior management involvement and how a security process must complement the overall business process. ... The writing is clear and readable for nontechnical people. I highly recommend it to anyone interested in cyber security." (Computing Reviews, May, 2017)

Spis treści

1. The Problem We Are Facing
   
2. Protecting Critical Assets
   
3. Monetizing Risk
   
4. Security Intelligence Model
   
5. Incident Response Planning
   
6. The People Problem
   
7. Assigning Accountability
   
8. Shifting the Paradigm
   
9. The Definition of Insanity
   
10. Déjà Vu
    
11. The Information Security Community
    
12. Partnering with Governments
    

O autorze

Jeremy Wittkop is a leader in the information security industry, specifically as it relates to content and context protection.  Jeremy brings insights from a variety of industries including, military and defense, logistics, entertainment, as well as information security services.

Jeremy started with Intelisecure as the leader of the Managed Services department and has overseen 1000% growth of that department by helping to solve complex Information Security challenges for organizations spanning the globe. Jeremy now leads Intelisecure's Sales Engineering team, which is responsible for architecting solution packages that include creative approaches to people, process, and technology.