Protective Security: Creating Military-Grade Defenses for Your Digital Business

ISBN-13: 9781484269077 / Angielski / Miękka / 2021 / 743 str.

James Seaman

Spis treści

Chapter 1:  What is Protective Security (PS)?

An introduction to the term ‘Protective Security’ and a description of why this differs to other industry terms (e.g.  Cyber Security, Information Security, IT Security, Network Security, etc.)?

Why PS should be an integral for your business operations?

 

Chapter 2:  Protective Security (PS) in terms of the Legal & Regulatory Perspective.

A deep dive into the Legal and Regulatory perspectives and how an effective PS strategy can help fulfil these ever-changing requirements?

PS and the European Union General Data Protection Act (EU-GDPR).

 

Chapter 3:  The integration of Compliance with Protective Security (PS).

A description of where compliance fits into a company-wide PS strategy.

PS and the Payment Card Industry Data Security Standard (PCI DSS).

 

Chapter 4:  The Development of an Effective Protective Security (PS) Strategy.

A comprehensive guide to the development of an effective strategy, aligning business assets to their importance for the business objectives and goals, to incorporate the threats, risks, and core components of any strategy.

Strategic alignment with the business context.

 

Chapter 5:  Cyber Security.

A deep dive into the concept of Cyber Security, with a focus on Point of Origins (PoO) that occur in the ‘Badlands’ (e.g.  outside the corporate network) to compromise internet-facing technologies (e.g.  Ecommerce, Digital, Mobile, etc.)

Securing your Digital Footprint.

 

Chapter 6:  Network/IT Security.

The importance of secure by design/default networks to help safeguard your most important business IT assets from compromise.

Lateral Movement Attacks.

 

Chapter 7:  Information Systems Security.

Providing a guide to the securing of these systems, as a separate asset type, based upon the value of the data assets to the business and to aid the application of the 5 Ds of Security (Defend, Detect, Delay, Disrupt & Deter).

Building Effective 5 Ds Network Architectures.

 

Chapter 8:  Physical Security.

A comprehensive guide to the development of appropriate physical security measures and its importance within the Protective Security strategy.

Fortifying Your Business Operations.

 

Chapter 9:  Industrial Systems Security

Increasingly, Manufacturing systems are vulnerable to cyber-attacks.  Gain an insight how securing these environments can be balanced with a minimal impact on productivity.

Manufacturing Secure Operations.

 

Chapter 10:  Securing Your Supply Chain

Gain an appreciation for securing your Supply Chains and the measures needed to ensure that the Supply Chain risks are minimized.

The Weakest Link?

 

Chapter 11:  Developing Your Internal Firewall.

A focus on the development of a robust Security Culture, through the proactive engagement with a business’ personnel assets.

Security Is Not A Dirty Word.

 

Chapter 12:  Strict Access Restrictions

The ‘Need To Know’/’Need To Access’ are the fundamental principles for any effective Protective Security strategy.  Gain an insight into why this is the case and how to ensure that this is the case within your organization.

The Keys To Your Empire.

 

Chapter 13:  Building Resilient Systems

Gain an appreciation for the business value of building resilient systems and an understanding on what is required to develop resilience into your PS strategy.

The Ability To ‘Bounce Back’.

 

Chapter 14:  Demonstrating the Protective Security (PS) Return on Investments (RoI)

The value of an effective PS strategy is often underappreciated by business leaders.  Gain an understanding on how to demonstrate to that their investments continue to deliver a robust security posture and continues to ensure that they remain a less viable target.

The Value of PS.

O autorze

Jim (James) Seaman has been dedicated to the pursuit of security for his entire adult life. He served 22 years in the RAF Police, covering a number of specialist areas (physical security, aviation security, information security management, IT security management, cyber security management, security investigations, intelligence operations, incident response and disaster recovery), before successfully transitioning his skills to corporate environments (financial services, banking, retail, manufacturing, ecommerce, marketing, etc.) to help businesses enhance their cyber/InfoSec defensive measures working with various industry security standards.