Designing and Building Security Operations Center

ISBN-13: 9780128008997 / Angielski / Miękka / 2014 / 276 str.

David Nathans

Opis

Do you know what weapons are used to protect against cyber warfare and what tools to use to minimize their impact? How can you gather intelligence that will allow you to configure your system to ward off attacks? Online security and privacy issues are becoming more and more significant every day, with many instances of companies and governments mishandling (or deliberately misusing) personal and financial data. Organizations need to be committed to defending their own assets and their customers' information. Designing and Building a Security Operations Center will show you how to develop the organization, infrastructure, and capabilities to protect your company and your customers effectively, efficiently, and discreetly. Written by a subject expert who has consulted on SOC implementation in both the public and private sector, Designing and Building a Security Operations Center is the go-to blueprint for cyber-defense.

• Explains how to develop and build a Security Operations Center
• Shows how to gather invaluable intelligence to protect your organization
• Helps you evaluate the pros and cons behind each decision during the SOC-building process

Recenzje

"...a highly recommended reference for security managers and security practitioners who want to develop the capability to efficiently protect a company and its customers, or simply improve security incident management." --Computing Reviews

"A SOC is a security component most organizations are in dire need of, and the book is a good way to get them started on that effort." --RSAConference.com, January 2015

Spis treści

1. Define an operations center 2. Identify the customers 3. Required Infrastructure 4. Organizational Structure 5. Staffing 6. Daily operations 7. Training 8. Metrics 9. Outsourcing 10. Summary

O autorze

David Nathans is a highly-sought-after consultant on building enterprise security programs, Security Operation Centers and as a speaker on cyber security for conferences, interest groups, and corporate events. As a former CISO for a large US and Italian defense contractor as well as the former Global Security Operations Center manager for one of the largest Managed Security Services Providers in the world, he has a wealth of security operations knowledge he now shares. The experiences and lessons learned also stem from his time building security programs at one of the largest breached retail companies in history as well as working all over the world as a cyber-operations officer for the U.S. Air Force. He has also written and continues to write articles for SC Magazine