Enterprise cybersecurity study guide how to build a successful cyberdefense program against advanced threats

Cyberattacks in the headlines affecting millions of people show that this conundrum fails more often than we would prefer. Cybersecurity professionals want to implement more than what control frameworks specify, and more than what the budget allows. Ironically, another challenge is that even when de...

Full description

Bibliographic Details
Main Authors: Donaldson, Scott E., Siegel, Stanley G. (Author), Williams, Chris K. (Author), Aslam, Abdul (Author)
Format: eBook
Language:English
Published: New York, NY Apress 2018
Series:The expert's voice in cybersecurity
Subjects:
Online Access:
Collection: O'Reilly - Collection details see MPG.ReNa
LEADER 05513nmm a2200565 u 4500
001 EB001919644
003 EBX01000000000000001082546
005 00000000000000.0
007 cr|||||||||||||||||||||
008 210123 ||| eng
020 |a 1484232585 
020 |a 9781484232590 
020 |a 9781484232583 
020 |a 1484232593 
020 |a 9781484246283 
050 4 |a QA76.9.A25 
100 1 |a Donaldson, Scott E. 
245 0 0 |a Enterprise cybersecurity study guide  |b how to build a successful cyberdefense program against advanced threats  |c Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam 
260 |a New York, NY  |b Apress  |c 2018 
300 |a 1 online resource 
505 0 |a Part I: The Cybersecurity Challenge -- Chapter 1: Defining the Cybersecurity Challenge -- Chapter 2: Meeting the Cybersecurity Challenge -- Part II: A New Enterprise Cybersecurity Architecture -- Chapter 3: Enterprise Cybersecurity Architecture -- Chapter 4: Implementing Enterprise Cybersecurity -- Chapter 5: Operating Enterprise Cybersecurity -- Chapter 6: Enterprise Cybersecurity and the Cloud -- Chapter 7: Enterprise Cybersecurity for Mobile and BYOD -- Part III: The Art of Cyber Defense -- Chapter 8: Building an Effective Defense -- Chapter 9: Responding to Incidents -- Chapter 10: Managing a Cybersecurity Crisis -- Part IV: Enterprise Cyber Defense Assessment -- Chapter 11: Assessing Enterprise Cybersecurity -- Chapter 12: Measuring a Cybersecurity Program -- Chapter 13: Mapping Against Cybersecurity Frameworks -- Part V: Enterprise Cybersecurity Program -- Chapter 14: Managing an Enterprise Cybersecurity Program -- Chapter 15: Looking to the Future -- Part VI: Appendices -- Appendix A: Sample Cybersecurity Policy -- Appendix B: Cybersecurity Operational Processes -- Appendix C: Object Measurement -- Appendix D: Cybersecurity Sample Assessment -- Appendix E: Cybersecurity Capability Value Scales 
653 |a Sécurité informatique 
653 |a COMPUTERS / Data Processing / bisacsh 
653 |a Coding theory & cryptology / bicssc 
653 |a Computer crimes / Prevention 
653 |a Computer security / http://id.loc.gov/authorities/subjects/sh90001862 
653 |a Computer security / bicssc 
653 |a Computer security / fast 
653 |a Computer crimes / Prevention / fast 
653 |a Computer Security 
700 1 |a Siegel, Stanley G.  |e author 
700 1 |a Williams, Chris K.  |e author 
700 1 |a Aslam, Abdul  |e author 
041 0 7 |a eng  |2 ISO 639-2 
989 |b OREILLY  |a O'Reilly 
490 0 |a The expert's voice in cybersecurity 
500 |a Includes index 
028 5 0 |a 10.1007/978-1-4842-3258-3 
776 |z 1484232577 
776 |z 9781484246283 
776 |z 9781484232576 
776 |z 9781484232590 
776 |z 1484232585 
776 |z 9781484232583 
856 4 0 |u https://learning.oreilly.com/library/view/~/9781484232583/?ar  |x Verlag  |3 Volltext 
082 0 |a 364.1 
082 0 |a 005.8 
520 |a Cyberattacks in the headlines affecting millions of people show that this conundrum fails more often than we would prefer. Cybersecurity professionals want to implement more than what control frameworks specify, and more than what the budget allows. Ironically, another challenge is that even when defenders get everything that they want, clever attackers are extremely effective at finding and exploiting the gaps in those defenses, regardless of their comprehensiveness. Therefore, the cybersecurity challenge is to spend the available budget on the right protections, so that real-world attacks can be thwarted without breaking the bank. People involved in or interested in successful enterprise cybersecurity can use this study guide to gain insight into a comprehensive framework for coordinating an entire enterprise cyberdefense program.  
520 |a What You'll Learn: Know the methodology of targeted attacks and why they succeed Master the cybersecurity risk management process Understand why cybersecurity capabilities are the foundation of effective cyberdefenses Organize a cybersecurity program's policy, people, budget, technology, and assessment Assess and score a cybersecurity program Report cybersecurity program status against compliance and regulatory frameworks Use the operational processes and supporting information systems of a successful cybersecurity program Create a data-driven and objectively managed cybersecurity program Discover how cybersecurity is evolving and will continue to evolve over the next decade 
520 |a Use the methodology in this study guide to design, manage, and operate a balanced enterprise cybersecurity program that is pragmatic and realistic in the face of resource constraints and other real-world limitations. This guide is an instructional companion to the book Enterprise Cybersecurity: How to Build a Successful Cyberdefense Program Against Advanced Threats. The study guide will help you understand the book's ideas and put them to work. The guide can be used for self-study or in the classroom. Enterprise cybersecurity is about implementing a cyberdefense program that will succeed in defending against real-world attacks. While we often know what should be done, the resources to do it often are not sufficient. The reality is that the Cybersecurity Conundrum--what the defenders request, what the frameworks specify, and what the budget allows versus what the attackers exploit--gets in the way of what needs to be done.