Security Management

In Cybersecurity Risk Management: Mastering the Fundamentals Using the NIST Cybersecurity Framework, veteran technology analyst Cynthia Brumfield, with contributions from cybersecurity expert Brian Haugli, delivers an up-to-date exploration of the fundamentals of cybersecurity risk planning and management. The book offers listeners overviews of cybersecurity risk management principles, user, and network infrastructure planning, as well as the tools and techniques for detecting cyberattacks.

Since the introduction of multi-user computer systems, user authentication has primarily relied on the use of usernames and passwords. To strengthen the authentication process, Multi-Factor Authentication (MFA) requires the user to present multiple elements in different categories, or “factors,” as part of an authentication attempt. These factors are something you have, something you know, and something you are.

Identity and access management (IAM) is a framework of business processes, policies, and technologies that facilitate the management of digital identities to ensure that users only gain access to data when they have the appropriate credentials.

Stepping Through Cybersecurity Risk Management covers the professional practice of cybersecurity from the perspective of enterprise governance and risk management. It describes the state of the art in cybersecurity risk identification, classification, measurement, remediation, monitoring and reporting.

Ransomware is a type of malicious attack where attackers encrypt an organization’s data and demand payment to restore access. This Ransomware Profile identifies the Cybersecurity Framework Version 1.1 security objectives that support identifying, protecting against, detecting, responding to, and recovering from ransomware events. The profile can be used as a guide to managing the risk of ransomware events. That includes helping to gauge an organization’s level of readiness to counter ransomware threats and to deal with the potential consequences of events.

In How to Measure Anything in Cybersecurity Risk, Second Edition, a pioneering information security professional and a leader in quantitative analysis methods deliver yet another eye-opening text applying the quantitative language of risk analysis to cybersecurity. In the book, the authors demonstrate how to quantify uncertainty and shed light on how to measure seemingly intangible goals. It's a practical guide to improving risk assessment with a straightforward and simple framework.

This essential guide, with its dozens of examples and case studies, breaks down every element of the development and management of a cybersecurity program for the executive. From understanding the need, to core risk management principles, to threats, tools, roles, and responsibilities, this book walks the listener through each step of developing and implementing a cybersecurity program. If you're a business manager or executive who needs to make sense of cybersecurity, this audiobook demystifies it for you.

Security isn’t just about guarding doors, it’s about cultivating professionalism, accountability, and trust in high-rise building environments. Security Program Report: offers a results-driven framework for developing disciplined, service-oriented teams that deliver excellence every shift.

Harvard University professor and U.S. Intelligence Science Board member J. Richard Hackman reveals how to make teams more effective in solving hard, complex problems in intelligence work and other challenging, high-pressure areas.

Most security business owners are running flat out, firefighting daily, juggling too much, and wondering why they’re not seeing the results they want. The Tactical Advantage is a straight-talking guide for security company owners who want to grow with clarity, confidence, and control. Shaun West, a former British Paratrooper turned entrepreneur and business coach, built a seven-figure security business from scratch. He knows the long nights, the tough clients, the endless juggling act and what it takes to build a business that doesn’t just survive but thrives.

In A Leader's Guide to Cybersecurity, Thomas Parenty and Jack Domet, who've spent over three decades in the field, present a timely, clear-eyed, and actionable framework that will empower senior executives and board members to become stewards of their companies' cybersecurity activities. Filled with tools, best practices, and strategies, A Leader's Guide to Cybersecurity will help boards navigate this seemingly daunting but extremely necessary transition.

The Cybersecurity Playbook is the step-by-step guide to protecting your organization from unknown threats and integrating good security habits into everyday business situations. This audiobook provides clear guidance on how to identify weaknesses, assess possible threats, and implement effective policies. Recognizing that an organization's security is only as strong as its weakest link, this audiobook offers specific strategies for employees at every level.

More than one million copies have been sold of this seminal book on investing in which legendary mutual-fund manager Peter Lynch explains the advantages that average investors have over professionals and how they can use these advantages to achieve financial success. America’s most successful...

Organizations are increasingly vulnerable as attack surfaces grow and cyber threats evolve. Addressing these threats is vital, making attack surface management (ASM) essential for security leaders globally. This practical book provides a comprehensive guide to help you master ASM. Authors Ron Eddings and MJ Kaufmann offer actionable solutions for newcomers and experts alike, using machine learning and AI techniques. ASM helps you routinely assess digital assets to gain complete insight into vulnerabilities, and potential threats.

All organizations face a broad array of risks, including cybersecurity risk. For federal agencies, the Office of Management and Budget (OMB) Circular A-11 defines risk as “the effect of uncertainty on objectives”. An organization’s mission and business objectives can be impacted by such effects, and must be managed at various levels within the organization. This report highlights aspects of cybersecurity risk management (CSRM) inherent to enterprises, organizations, and systems.

A comprehensive and easy-to-understand guide to the ins and outs of retirement planning—updated to include the latest information on new terminology, guideline updates, revised laws, and more making it the key resource for creating a retirement you can live on! How much do I need to retire?...

This is a VIP executive study guide of the Intelligent Investor book. The Intelligent Investor was written Benjamin Graham and published in 1949. The book is widely used by many gurus and business schools, but is outdated. It was and is a widely acclaimed book on value investing. Graham died in 1976. George Mentz, the IBA award-winning author, has created a five-page summary and analysis of the key securities analysis and wealth management issues for those who are students, MBA candidates, managers, and leaders.

A comprehensive and easy-to-understand guide to the ins and outs of retirement planning—the key resource for creating a retirement you can live on! How much do I need to retire? Can I retire early? What’s the retirement age, anyway? No matter whether you are 25, 65, or any age in between...

Crisis is inevitable - but it doesn't have to torpedo your finances! Financial Security for Dummies offers advice to help you prep your finances for the next economic downturn, personal setback, pandemic, plague of locusts - or anything else life throws your way. This book contains the historical perspective and up-to-date info you'll need to navigate a wide range of personal financial challenges.

Learn the ins and outs of the social security system in this accessible, easy-to-navigate guide with refreshed, updated information in Social Security 101, 2nd Edition. Too often, writing about social security turns the noteworthy details of the benefits into boring details about regulations or...