Security Management

In Cybersecurity Risk Management: Mastering the Fundamentals Using the NIST Cybersecurity Framework, veteran technology analyst Cynthia Brumfield, with contributions from cybersecurity expert Brian Haugli, delivers an up-to-date exploration of the fundamentals of cybersecurity risk planning and management. The book offers listeners overviews of cybersecurity risk management principles, user, and network infrastructure planning, as well as the tools and techniques for detecting cyberattacks.

Since the introduction of multi-user computer systems, user authentication has primarily relied on the use of usernames and passwords. To strengthen the authentication process, Multi-Factor Authentication (MFA) requires the user to present multiple elements in different categories, or “factors,” as part of an authentication attempt. These factors are something you have, something you know, and something you are.

Identity and access management (IAM) is a framework of business processes, policies, and technologies that facilitate the management of digital identities to ensure that users only gain access to data when they have the appropriate credentials.

Stepping Through Cybersecurity Risk Management covers the professional practice of cybersecurity from the perspective of enterprise governance and risk management. It describes the state of the art in cybersecurity risk identification, classification, measurement, remediation, monitoring and reporting.

Ransomware is a type of malicious attack where attackers encrypt an organization’s data and demand payment to restore access. This Ransomware Profile identifies the Cybersecurity Framework Version 1.1 security objectives that support identifying, protecting against, detecting, responding to, and recovering from ransomware events. The profile can be used as a guide to managing the risk of ransomware events. That includes helping to gauge an organization’s level of readiness to counter ransomware threats and to deal with the potential consequences of events.

In How to Measure Anything in Cybersecurity Risk, Second Edition, a pioneering information security professional and a leader in quantitative analysis methods deliver yet another eye-opening text applying the quantitative language of risk analysis to cybersecurity. In the book, the authors demonstrate how to quantify uncertainty and shed light on how to measure seemingly intangible goals. It's a practical guide to improving risk assessment with a straightforward and simple framework.

In A Leader's Guide to Cybersecurity, Thomas Parenty and Jack Domet, who've spent over three decades in the field, present a timely, clear-eyed, and actionable framework that will empower senior executives and board members to become stewards of their companies' cybersecurity activities. Filled with tools, best practices, and strategies, A Leader's Guide to Cybersecurity will help boards navigate this seemingly daunting but extremely necessary transition.

This essential guide, with its dozens of examples and case studies, breaks down every element of the development and management of a cybersecurity program for the executive. From understanding the need, to core risk management principles, to threats, tools, roles, and responsibilities, this book walks the listener through each step of developing and implementing a cybersecurity program. If you're a business manager or executive who needs to make sense of cybersecurity, this audiobook demystifies it for you.

Harvard University professor and U.S. Intelligence Science Board member J. Richard Hackman reveals how to make teams more effective in solving hard, complex problems in intelligence work and other challenging, high-pressure areas.

The global contract security market now totals over $200 billion, with the number of private security officers exceeding that of public law enforcement officers. But this wasn't always the case. Legends of the Security Services Industry: Profiles in Leadership presents the unique stories of fifteen industry legends, who transformed the industry from early private detective and small night watch companies into large-scale contract security companies.

All organizations face a broad array of risks, including cybersecurity risk. For federal agencies, the Office of Management and Budget (OMB) Circular A-11 defines risk as “the effect of uncertainty on objectives”. An organization’s mission and business objectives can be impacted by such effects, and must be managed at various levels within the organization. This report highlights aspects of cybersecurity risk management (CSRM) inherent to enterprises, organizations, and systems.

Security isn’t just about guarding doors, it’s about cultivating professionalism, accountability, and trust in high-rise building environments. Security Program Report: offers a results-driven framework for developing disciplined, service-oriented teams that deliver excellence every shift.

Organizations are increasingly vulnerable as attack surfaces grow and cyber threats evolve. Addressing these threats is vital, making attack surface management (ASM) essential for security leaders globally. This practical book provides a comprehensive guide to help you master ASM. Authors Ron Eddings and MJ Kaufmann offer actionable solutions for newcomers and experts alike, using machine learning and AI techniques. ASM helps you routinely assess digital assets to gain complete insight into vulnerabilities, and potential threats.

The following questions I used to always ask when I was only utilizing the first dimension of budgeting: Does budgeting feel like a never-ending cycle of cutting back, stressing out, and still coming up short at the end of the month? Have you ever made a budget, only to watch it fall apart the moment an unexpected bill or last-minute expense hits? Do you feel like your paycheck disappears faster than a magician’s trick—no matter how hard you try to budget?

This is a breakdown of the NIST risk management framework process for cybersecurity professionals getting into security compliance. It is written in layman's terms, without the convoluted way it is described in the NIST SP 800-37 revision 2. It goes into what the information system security officer does at each step in the process and where their attention should be focused. Although the main focus is on implementation of the NIST 800 RMF process, this book covers many of the main concepts on certifications, such as the ISC2 CAP.

The Cybersecurity Playbook is the step-by-step guide to protecting your organization from unknown threats and integrating good security habits into everyday business situations. This audiobook provides clear guidance on how to identify weaknesses, assess possible threats, and implement effective policies. Recognizing that an organization's security is only as strong as its weakest link, this audiobook offers specific strategies for employees at every level.

A comprehensive and easy-to-understand guide to the ins and outs of retirement planning—updated to include the latest information on new terminology, guideline updates, revised laws, and more making it the key resource for creating a retirement you can live on! How much do I need to retire?...

A comprehensive and easy-to-understand guide to the ins and outs of retirement planning—the key resource for creating a retirement you can live on! How much do I need to retire? Can I retire early? What’s the retirement age, anyway? No matter whether you are 25, 65, or any age in between...

Crisis is inevitable - but it doesn't have to torpedo your finances! Financial Security for Dummies offers advice to help you prep your finances for the next economic downturn, personal setback, pandemic, plague of locusts - or anything else life throws your way. This book contains the historical perspective and up-to-date info you'll need to navigate a wide range of personal financial challenges.

Learn the ins and outs of the social security system in this accessible, easy-to-navigate guide with refreshed, updated information in Social Security 101, 2nd Edition. Too often, writing about social security turns the noteworthy details of the benefits into boring details about regulations or...