Book Image

Agile Security Operations

By : Hinne Hettema
Book Image

Agile Security Operations

By: Hinne Hettema

Overview of this book

Agile security operations allow organizations to survive cybersecurity incidents, deliver key insights into the security posture of an organization, and operate security as an integral part of development and operations. It is, deep down, how security has always operated at its best. Agile Security Operations will teach you how to implement and operate an agile security operations model in your organization. The book focuses on the culture, staffing, technology, strategy, and tactical aspects of security operations. You'll learn how to establish and build a team and transform your existing team into one that can execute agile security operations. As you progress through the chapters, you’ll be able to improve your understanding of some of the key concepts of security, align operations with the rest of the business, streamline your operations, learn how to report to senior levels in the organization, and acquire funding. By the end of this Agile book, you'll be ready to start implementing agile security operations, using the book as a handy reference.
Table of Contents (17 chapters)
1
Section 1: Incidence Response: The Heart of Security
5
Section 2: Defensible Organizations
10
Section 3: Advanced Agile Security Operations

Section 2: Defensible Organizations

Part 2 discusses the nebulous topic of "security culture" and "defensible organizations." I approach security culture from the viewpoint of a number of key security concepts: chaos, constraints, defensibility, exaptation, strategy, and tactics, and illustrate how these play a role in security culture. I then move on to lay out the basic concepts of defensible architecture and defensible operations. By "defensible" in this context, I mean that these are capable of surviving a modern cyber attack. I then move on to discuss how we can test these notions through gamification and wargaming.

This part of the book comprises the following chapters: