Enterprise Cybersecurity Study Guide

✍ Scribed by Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam

• Publisher: Apress
• Year: 2018
• Tongue: English
• Leaves: 737
• Edition: 1st ed.
• Category: Library

✦ Synopsis

Use the methodology in this study guide to design, manage, and operate a balanced enterprise cybersecurity program that is pragmatic and realistic in the face of resource constraints and other real-world limitations. This guide is an instructional companion to the book Enterprise Cybersecurity: How to Build a Successful Cyberdefense Program Against Advanced Threats. The study guide will help you understand the book’s ideas and put them to work. The guide can be used for self-study or in the classroom.

Enterprise cybersecurity is about implementing a cyberdefense program that will succeed in defending against real-world attacks. While we often know what should be done, the resources to do it often are not sufficient. The reality is that the Cybersecurity Conundrum—what the defenders request, what the frameworks specify, and what the budget allows versus what the attackers exploit—gets in the way of what needs to be done. Cyberattacks in the headlines affecting millions of people show that this conundrum fails more often than we would prefer.

Cybersecurity professionals want to implement more than what control frameworks specify, and more than what the budget allows. Ironically, another challenge is that even when defenders get everything that they want, clever attackers are extremely effective at finding and exploiting the gaps in those defenses, regardless of their comprehensiveness. Therefore, the cybersecurity challenge is to spend the available budget on the right protections, so that real-world attacks can be thwarted without breaking the bank.

People involved in or interested in successful enterprise cybersecurity can use this study guide to gain insight into a comprehensive framework for coordinating an entire enterprise cyberdefense program.

What You’ll Learn

• Know the methodology of targeted attacks and why they succeed
• Master the cybersecurity risk management process
• Understand why cybersecurity capabilities are the foundation of effective cyberdefenses
• Organize a cybersecurity program's policy, people, budget, technology, and assessment
• Assess and score a cybersecurity program
• Report cybersecurity program status against compliance and regulatory frameworks
• Use the operational processes and supporting information systems of a successful cybersecurity program
• Create a data-driven and objectively managed cybersecurity program
• Discover how cybersecurity is evolving and will continue to evolve over the next decade

Who This Book Is For

Those involved in or interested in successful enterprise cybersecurity (e.g., business professionals, IT professionals, cybersecurity professionals, and students). This guide can be used in a self-study mode. The book can be used by students to facilitate note-taking in the classroom and by Instructors to develop classroom presentations based on the contents of the original book, Enterprise Cybersecurity: How to Build a Successful Cyberdefense Program Against Advanced Threats.

✦ Table of Contents

Front Matter ....Pages i-xlvi
Front Matter ....Pages 1-1
Defining the Cybersecurity Challenge (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 3-51
Meeting the Cybersecurity Challenge (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 53-92
Front Matter ....Pages 93-93
Enterprise Cybersecurity Architecture (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 95-133
Implementing Enterprise Cybersecurity (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 135-171
Operating Enterprise Cybersecurity (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 173-217
Enterprise Cybersecurity and the Cloud (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 219-247
Enterprise Cybersecurity for Mobile and BYOD (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 249-274
Front Matter ....Pages 275-275
Building an Effective Defense (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 277-312
Responding to Incidents (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 313-332
Managing a Cybersecurity Crisis (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 333-375
Front Matter ....Pages 377-377
Assessing Enterprise Cybersecurity (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 379-405
Measuring a Cybersecurity Program (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 407-428
Mapping Against Cybersecurity Frameworks (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 429-447
Front Matter ....Pages 449-449
Managing an Enterprise Cybersecurity Program (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 451-486
Looking to the Future (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 487-511
Front Matter ....Pages 513-513
Sample Cybersecurity Policy (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 515-544
Cybersecurity Operational Processes (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 545-564
Object Measurement (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 565-602
Cybersecurity Sample Assessment (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 603-661
Cybersecurity Capability Value Scales (Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, Abdul Aslam)....Pages 663-700
Back Matter ....Pages 701-709

✦ Subjects

Computer Science; Security; Data Encryption; Systems and Data Security