Building a Corporate Culture of Security: Strategies for Strengthening Organizational Resiliency

ISBN-13: 9780128020197 / Angielski / Miękka / 2016 / 298 str.

Sullivant, John

Opis

Building a Corporate Culture of Security: Strategies for Strengthening Organizational Resiliency provides readers with the proven strategies, methods, and techniques they need to present ideas and a sound business case for improving or enhancing security resilience to senior management. Presented from the viewpoint of a leading expert in the field, the book offers proven and integrated strategies that convert threats, hazards, risks, and vulnerabilities into actionable security solutions, thus enhancing organizational resiliency in ways that executive management will accept. The book delivers a much-needed look into why some corporate security practices programs work and others don't. Offering the tools necessary for anyone in the organization charged with security operations, Building a Corporate Culture of Security provides practical and useful guidance on handling security issues corporate executives hesitate to address until it's too late.

• Provides a comprehensive understanding of the root causes of the most common security vulnerabilities that impact organizations and strategies for their early detection and prevention
• Offers techniques for security managers on how to establish and maintain effective communications with executives, especially when bringing security weakness--and solutions--to them
• Outlines a strategy for determining the value and contribution of protocols to the organization, how to detect gaps, duplications and omissions from those protocols, and how to improve their purpose and usefulness
• Explores strategies for building professional competencies; managing security operations, and assessing risks, threats, vulnerabilities, and consequences
• Shows how to establish a solid foundation for the layering of security and building a resilient protection-in-depth capability that benefits the entire organization
• Offers appendices with proven risk management and risk-based metric frameworks and architecture platforms

Recenzje

"Building an effective security program is a daunting task...for those looking for an effective resource in which to start or jumpstart their program; Building a Corporate Culture of Security: Strategies for Strengthening Organizational Resiliency is a book that will certainly help them immensely." --RSAConference.com

"The basic premise is that too many C-suite residents still consider security as a "cost-center." Sullivant identifies approaches like creating and using valuable metrics to make a convincing case for a program." --Security Letter

"Seasoned security managers, as well as C-suite executives seeking to effect positive change, can use this book to further professional development, and professors will find it to be an excellent teaching tool. At the outset of a career, knowing and applying the strategies discussed within can save a security manager a lot of time and headaches in working with organizations. There is little doubt that this book will become a valuable resource for security professionals now and in the future."--Security Management

Spis treści

Chapter 1: IntroductionChapter 2: Strategies Create Your Life LineChapter 3: The Many Faces of Vulnerability Creep-inChapter 4: The Evolving Threat EnvironmentChapter 5: The Cyber Threat LandscapeChapter 6: Establishing a Security Risk Management Program is CrucialChapter 7: Useful Metrics Give The Security Organization StandingChapter 8: A User Friendly Security Assessment ModelChapter 9: Developing a Realistic and Useful Threat Estimate ProfileChapter 10: Establishing and Maintaining Inseparable Security CompetenciesChapter 11: A User Friendly Security Technology Assessment ModelChapter 12: Preparing for EmergenciesChapter 13: A User Friendly Protocol Development ModelChapter 14: A Proven Organization and Management Assessment ModelChapter 15: Building Competencies that CountChapter 16: How to Communicate with Executives and Governing BodiesChapter 17: A Brighter Tomorrow - My Thoughts

O autorze

John Sullivant creates strategic security planning initiatives for corporations and governments throughout the world. Throughout his lengthy security career, he has held numerous senior security positions in both the public and private sector, served on several national security councils, committees and advisory boards, and spoken frequently at professional security associations and educational institutions. He is the author of a reference on protecting critical infrastructure and his work has appeared in Security Management, the leading Security publication.