2 minute read
Cyber Risk Management
Cyber Risk Management Prioritize Threats, Identify Vulnerabilities and Apply Controls
Edition 1
Pages Dimensions Subject 03/06/2019
416 234x156 Risk Management
This book << Provides guidance on managing common threats to confidentiality, integrity and availability including malware, data leakage, insider threat and Denial-of-Service << Includes examples and use cases including Yahoo, Facebook and TalkTalk, along with implementation review checklists at the end of each chapter << Explores how to prioritize relevant risks rather than those sensationalized by the media
Author Information
Christopher J Hodson is Chief Information Security Officer (CISO), EMEA at Tanium. He has 18 years’ experience across the financial, retail, energy and media industry sectors and was previously CISO, EMEA and Data Protection Officer at Zscaler. He holds an MSc in Cyber Security from Royal Holloway and retains an active role in the Infosec industry through directorship of the Institute of Information Security Professionals (IISP) and membership of CompTIA’s Cyber Security Committee.
Description
Most organizations are undergoing a digital transformation of some sort and are looking to embrace innovative technology, but new ways of doing business inevitably lead to new threats which can cause irreparable financial, operational and reputational damage. In an increasingly punitive regulatory climate, organizations are also under pressure to be more accountable and compliant. Cyber Risk Management clearly explains the importance of implementing a cyber security strategy and provides practical guidance for those responsible for managing threat events, vulnerabilities and controls, including malware, data leakage, insider threat and Denial-of-Service.
Examples and use cases including Yahoo, Facebook and TalkTalk, add context throughout and emphasize the importance of communicating security and risk effectively, while implementation review checklists bring together key points at the end of each chapter. Cyber Risk Management analyzes the innate human factors around risk and how they affect cyber awareness and employee training, along with the need to assess the risks posed by third parties. Including an introduction to threat modelling, this book presents a datacentric approach to cyber risk management based on business impact assessments, data classification, data flow modelling and assessing return on investment. It covers pressing developments in artificial intelligence, machine learning, big data and cloud mobility, and includes advice on responding to risks which are applicable for the environment and not just based on media sensationalism.
Table of Contents
1 Contextualizing cybersecurity risk 1.1 Why now? The only constant is change 1.2 Technologies and security challenges 1.3 Data breaches 2 Cybersecurity programme management 2.1 What are cybersecurity and cybercrime? 2.2 Establishing a cybersecurity programme 3 Actors, events and vulnerabilities 3.1 Threat actors 3.2 Threat events 3.3 Vulnerabilities 3.4 Controls 4 Conclusion – The cybersecurity risk equation explained 4.1 Cyber risk management – A conclusion
Related Titles
IT Governance 9780749474058 £49.99
Fundamentals of Risk Management 9780749483074 £39.99
