Sign In Start Free Trial
Account

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Executive's Cybersecurity Program Handbook
  • Table Of Contents Toc
Executive's Cybersecurity Program Handbook

Executive's Cybersecurity Program Handbook

By : Jason Brown
4.7 (7)
close
close
Executive's Cybersecurity Program Handbook

Executive's Cybersecurity Program Handbook

4.7 (7)
By: Jason Brown

Overview of this book

Ransomware, phishing, and data breaches are major concerns affecting all organizations as a new cyber threat seems to emerge every day, making it paramount to protect the security of your organization and be prepared for potential cyberattacks. This book will ensure that you can build a reliable cybersecurity framework to keep your organization safe from cyberattacks. This Executive’s Cybersecurity Program Handbook explains the importance of executive buy-in, mission, and vision statement of the main pillars of security program (governance, defence, people and innovation). You’ll explore the different types of cybersecurity frameworks, how they differ from one another, and how to pick the right framework to minimize cyber risk. As you advance, you’ll perform an assessment against the NIST Cybersecurity Framework, which will help you evaluate threats to your organization by identifying both internal and external vulnerabilities. Toward the end, you’ll learn the importance of standard cybersecurity policies, along with concepts of governance, risk, and compliance, and become well-equipped to build an effective incident response team. By the end of this book, you’ll have gained a thorough understanding of how to build your security program from scratch as well as the importance of implementing administrative and technical security controls.
Table of Contents (18 chapters)
close
close
1
Part 1 – Getting Your Program Off the Ground
5
Part 2 – Administrative Cybersecurity Controls
11
Part 3 – Technical Controls

Securing Software Development through DevSecOps

Historically, security in the software development life cycle (SDLC) has not received as much attention as it should. We have built a defensive network security architecture to combat poor software design. Legacy systems that were introduced years ago, sometimes decades ago, with little to no documentation leave IT and security teams scrambling when a new software vulnerability is discovered. Supply chain issues have crept up in recent years, sabotaging legitimate software vendors and open source contributors.

The term DevOps, or development and operations, has been around for a long time. The term stems from the combination of these two teams working collaboratively. The software development team needs IT and operations in order to deploy their code to production. There are reasons for this, but it is mainly to maintain separation of duties. Many organizations, even today, do not provide this separation. This often leaves IT administrators...

CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Executive's Cybersecurity Program Handbook
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist download Download options font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected

Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon