Book Image

Cybersecurity Blue Team Strategies

By : Kunal Sehgal, Nikolaos Thymianis
Book Image

Cybersecurity Blue Team Strategies

By: Kunal Sehgal, Nikolaos Thymianis

Overview of this book

We've reached a point where all organizational data is connected through some network. With advancements and connectivity comes ever-evolving cyber threats - compromising sensitive data and access to vulnerable systems. Cybersecurity Blue Team Strategies is a comprehensive guide that will help you extend your cybersecurity knowledge and teach you to implement blue teams in your organization from scratch. Through the course of this book, you’ll learn defensive cybersecurity measures while thinking from an attacker's perspective. With this book, you'll be able to test and assess the effectiveness of your organization’s cybersecurity posture. No matter the medium your organization has chosen- cloud, on-premises, or hybrid, this book will provide an in-depth understanding of how cyber attackers can penetrate your systems and gain access to sensitive information. Beginning with a brief overview of the importance of a blue team, you’ll learn important techniques and best practices a cybersecurity operator or a blue team practitioner should be aware of. By understanding tools, processes, and operations, you’ll be equipped with evolving solutions and strategies to overcome cybersecurity challenges and successfully manage cyber threats to avoid adversaries. By the end of this book, you'll have enough exposure to blue team operations and be able to successfully set up a blue team in your organization.
Table of Contents (18 chapters)
1
Part 1:Establishing the Blue
14
Part 3:Ask the Experts

Following the NIST methodology

In this part, we will focus on the National Institute of Standards and Technology (NIST) methodology and how it shapes an organization. According to various experts, the NIST methodology is one of the most prominent methodologies used in the world today.

The Department of Defense (DoD) in the United States released version 1.0 of its NIST 800-171 Assessment methodology on November 7, 2019, because of a cyberattack on the DoD Navy submarine program in 2018, which caused a critical breach. Version 1.2 is the latest version at the time of writing and was released on June 10, 2020. Contractors first anticipated such a risk assessment methodology in January 2019, when Ellen Lord, Under Secretary of Defense for Acquisition and Sustainment, tasked the Defense Contract Management Agency (DCMA) with auditing the compliance of DoD contractors with the requirements of NIST 800-171. Of course, this was not the only reason why the DoD changed the NIST methodology...