Sign In Start Free Trial
Account

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Executive's Cybersecurity Program Handbook
  • Table Of Contents Toc
Executive's Cybersecurity Program Handbook

Executive's Cybersecurity Program Handbook

By : Jason Brown
4.7 (7)
close
close
Executive's Cybersecurity Program Handbook

Executive's Cybersecurity Program Handbook

4.7 (7)
By: Jason Brown

Overview of this book

Ransomware, phishing, and data breaches are major concerns affecting all organizations as a new cyber threat seems to emerge every day, making it paramount to protect the security of your organization and be prepared for potential cyberattacks. This book will ensure that you can build a reliable cybersecurity framework to keep your organization safe from cyberattacks. This Executive’s Cybersecurity Program Handbook explains the importance of executive buy-in, mission, and vision statement of the main pillars of security program (governance, defence, people and innovation). You’ll explore the different types of cybersecurity frameworks, how they differ from one another, and how to pick the right framework to minimize cyber risk. As you advance, you’ll perform an assessment against the NIST Cybersecurity Framework, which will help you evaluate threats to your organization by identifying both internal and external vulnerabilities. Toward the end, you’ll learn the importance of standard cybersecurity policies, along with concepts of governance, risk, and compliance, and become well-equipped to build an effective incident response team. By the end of this book, you’ll have gained a thorough understanding of how to build your security program from scratch as well as the importance of implementing administrative and technical security controls.
Table of Contents (18 chapters)
close
close
1
Part 1 – Getting Your Program Off the Ground
5
Part 2 – Administrative Cybersecurity Controls
11
Part 3 – Technical Controls

Secure coding checklists

As mentioned previously, secure coding can be difficult to achieve as it is not often taught in schools. Many developers, if they have the time, research secure coding practices either at work or while they are at home in their free time. Resources have been created to assist with the methods of secure coding; the problem is just finding the best method for your needs.

Three organizations stand out in providing secure coding practices: NIST, the Software Engineering Institute (SEI) at Carnegie Mellon University, and OWASP. Both organizations provide material and checklists for how to train your employees and what to look for when evaluating code.

NIST

With assistance from BSA, OWASP, and SAFECode, NIST has developed the Secure Software Development Framework (SSDF). The framework laid out in SP 800-218 assists organizations in establishing a method for maintaining software throughout the SDLC. The criteria for the SSDF are as follows:

  • Prepare...
CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Executive's Cybersecurity Program Handbook
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist download Download options font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected

Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon