Book Image

The Cybersecurity Playbook for Modern Enterprises

By : Jeremy Wittkop
Book Image

The Cybersecurity Playbook for Modern Enterprises

By: Jeremy Wittkop

Overview of this book

Security is everyone's responsibility and for any organization, the focus should be to educate their employees about the different types of security attacks and how to ensure that security is not compromised. This cybersecurity book starts by defining the modern security and regulatory landscape, helping you understand the challenges related to human behavior and how attacks take place. You'll then see how to build effective cybersecurity awareness and modern information security programs. Once you've learned about the challenges in securing a modern enterprise, the book will take you through solutions or alternative approaches to overcome those issues and explain the importance of technologies such as cloud access security brokers, identity and access management solutions, and endpoint security platforms. As you advance, you'll discover how automation plays an important role in solving some key challenges and controlling long-term costs while building a maturing program. Toward the end, you'll also find tips and tricks to keep yourself and your loved ones safe from an increasingly dangerous digital world. By the end of this book, you'll have gained a holistic understanding of cybersecurity and how it evolves to meet the challenges of today and tomorrow.
Table of Contents (15 chapters)
Section 1 – Modern Security Challenges
Section 2 – Building an Effective Program
Section 3 – Solutions to Common Problems

Chapter 4

  1. Describe business email compromise in your own words.

Business email compromise is a type of malicious email message that does not have a payload but instead tries to deceive the recipient into acting against their own interests. (Section: The most important threat vector)

  1. What is the concept of least privilege? What is need to know? How are they the same and how do they differ?

The concept of least privilege refers to the idea that people should be given the minimum permissions necessary to accomplish their job function. Need to know states information should only be shared with those who need to know it. The primary difference between the two is that the concept of least privilege refers to access, while need to know refers to information sharing. (Section: Time- honored best practices that could stop most breaches)

  1. What are the three factors of authentication?

Something you know, something you are, and something you have. (Section...