Learning Cybersecurity Fundamentals. A Practical Guide to Essential Cybersecurity Concepts Nicole Dove

Dostępność produktu

Produkt został zweryfikowany pod kątem ułatwień dostępu więcej przeczytasz w deklaracji dostępności.

Spis treści książki

• Preface
  • Who Should Read This Book
  • Why I Wrote This Book
  • Navigating This Book
  • Conventions Used in This Book
  • OReilly Online Learning
  • How to Contact Us
  • Acknowledgements
• 1. Understanding a Companys Cybersecurity Ecosystem
  • The CIA Triad: A Foundation for Cybersecurity
  • Technology Infrastructure
    • How Infrastructure Impacts Cybersecurity
    • Integrating Technology Infrastructure and Cybersecurity
    • Cybersecurity Technologies
  • People
    • Integrating People and Cybersecurity
    • The People Behind a Cybersecurity Program
    • Employees: The First Line of Defense
  • Processes
    • How Processes Impact Cybersecurity
    • Integrating Processes and Cybersecurity
    • Cybersecurity Processes
    • Validating Cybersecurity Processes
  • Culture
    • How Culture Impacts Cybersecurity
    • Integrating Culture and Cybersecurity
  • Conclusion
• 2. NIST Cybersecurity Framework
  • What Is the NIST CSF?
  • Identify
    • Asset Management
    • Risk Assessment
    • Improvements
  • Protect
    • Identity Management, Authentication, and Access Control
    • Awareness and Training
    • Data Security
    • Platform Security
    • Technology Infrastructure Resilience
    • Protective Technology
  • Detect
    • What Detection Looks Like in Action
    • Tools That Help with Detection
    • How the Detect Function Connects to the Bigger Picture
  • Respond
    • Why Response Is Critical
    • Respond Function Operational Categories
    • What Response Looks Like in Action
  • Recover
    • Recover Function Operational Categories
    • Recovery Is Everyones Responsibility
  • Govern
    • Govern Function Operational Categories
    • What the Govern Function Looks Like in Action
  • Conclusion
• 3. Asset Management
  • Understanding Asset Management
    • What Is an Asset?
    • Why Asset Management Is Critical for Cybersecurity
    • Impact of Shadow IT on Asset Management
      • Unsecured entry points
      • Data leakage
      • Hidden costs
  • Key Elements of a Cybersecurity Asset Management Program
  • Gathering Asset Inventory Information
    • Asset Name and Identifier
    • Asset Type and Category
    • Data Stored Within the Asset
    • Asset Accessibility
    • Asset Regulatory Considerations
    • Recovery Time Objective Baseline
    • Ownership and Custodianship
    • Lifecycle Status
  • Careers in Asset Management
    • Operations
    • Cybersecurity Governance, Risk, and Compliance
    • Security Operations Teams
    • Identity and Access Management Teams
    • Application Security and DevOps Teams
  • Keeping Inventories Up to Date
    • Automation
    • Integrate with Business Processes
    • Encourage Communication with Employees
    • Make Updates User Friendly
    • Perform Inventory Audits
  • Meeting Regulatory Requirements with Asset Management
    • GDPR and Asset Management
    • HIPAA and Asset Management
    • SOX and Asset Management
  • Meeting Industry Framework Compliance with Asset Management
  • Conclusion
• 4. Third-Party Security
  • Defining Third-Party Risk
  • Supply Chains and Third-Party Risk
  • Real-World Breaches
    • Target
    • SolarWinds Supply Chain Attack
    • MOVEit Breach
  • Business Impact of Supply Chain Attacks
    • Financial Fallout
    • Reputational Damage
    • Regulatory and Legal Consequences
    • Operational Disruption
    • Strategic Consequences
    • Human and Cultural Impact
  • Third-Party Risk Management Lifecycle
    • Due Diligence
      • The vendor questionnaire
      • SOC 2 reports
      • Certifications and frameworks
      • Audits and assessments
      • Cross-functional collaboration
    • Contracting and Procurement
      • Security standards and frameworks
      • Data protection and access controls
      • Incident reporting and response
      • Audit rights
      • Subcontractor management
      • Termination and data governance
    • Ongoing Monitoring and Continuous Improvement
    • Vendor Offboarding
  • Career Paths in Third-Party Risk Management
  • Conclusion
• 5. Identity and Access Management
  • What Is IAM?
  • The Three Pillars of IAM: Identification, Authentication, and Authorization
    • Identification: Claiming an Identity
    • Authentication: Proving Your Identity
    • Authorization: Determining What You Can Do
    • The Three Together: A Continuous Process
  • Digital Identities
    • Anatomy of a Digital Identity
    • Human and Nonhuman Identities
    • The Importance of Accuracy
    • Digital Identity and Trust
  • Authentication
    • The Three Factors of Authentication
    • Password Management and Policies
    • Multifactor Authentication
    • Adaptive Authentication
    • Biometrics and Passwordless Authentication
    • Challenges and Considerations
  • Authorization and Access Control Models
    • Access Control Models
      • Discretionary access control (DAC)
      • Mandatory access control (MAC)
      • Role-based access control (RBAC)
      • Attribute-based access control (ABAC)
      • Privileged access management (PAM)
    • From Static to Dynamic Control
    • Segregation of Duties and Policy Enforcement
    • Challenges in Managing Authorization
  • The IAM Lifecycle
  • Identity Governance and Administration (IGA)
  • Modern Access Strategies
    • Federation and Single Sign-On (SSO)
    • Zero Trust and Identity
  • Identity in Cloud and Hybrid Environments
  • Common IAM Pitfalls and Best Practices
  • Emerging Trends in IAM
  • Careers in Identity and Access Management
  • Conclusion
• 6. Information Protection Processes and Procedures
  • Understanding Data and Information in Cybersecurity
  • The Data Lifecycle
    • Data Creation and Collection
    • Data Storage
    • Data Use
    • Data Sharing and Transmission
    • Data Retention
    • Data Disposal and Destruction
  • Data Ownership, Stewardship, and Accountability
    • Data Ownership Versus Data Custodians
    • Why Ownership Matters
    • Accountability in Practice
  • Developing Data Protection Policies
    • Identifying and Classifying Sensitive Information
    • Data Classification Frameworks
    • Handling of Personal and Financial Data
    • Writing Clear and Actionable Policies
    • Ensuring Organization-Wide Adherence
  • Data Minimization and Purpose Limitation
  • Implementing Encryption and Data Loss Prevention
    • Types of Encryption and When and How to Use Them
    • Using Encryption in Transit and at Rest
    • Deploying DLP Solutions
      • Identifying data leakage risks
      • Best tools for DLP implementation (vendor neutral)
  • Information Protection in Cloud and SaaS Environments
  • Insider Risk and Human-Centered Information Protection
  • Audits and Assessments
    • What Is a Cybersecurity Audit?
    • What Is a Cybersecurity Assessment?
    • How Audits and Assessments Work Together
    • Internal and External Reviews
  • Continuous Improvement of Data Protection Practices
    • Staying Ahead of Emerging Threats
    • Adjusting to Regulatory Changes
  • Careers in Information Protection
  • Conclusion
• 7. Security Operations
  • What Is Security Operations?
    • Why Security Operations Matters
    • Security Operations Is Not Just a SOC
  • Continuous Monitoring and Visibility
    • Establishing Foundations
      • Visibility starts with knowing what exists
      • Defining normal
    • Data Sources and Telemetry
      • What does continuous monitoring actually monitor?
      • The role of logging
      • Continuous monitoring is not fully automated
    • From Signal to Action
      • Detection engineering and alert design
      • Alerting and escalation
      • Triage and investigation
    • Response and Restoration
      • Incident response and containment
      • Recovery and lessons learned
    • Maturing the Operation
      • Measuring operational effectiveness
      • Continuous improvement and maturity
  • Career Paths in Security Operations
  • Conclusion
• 8. Cloud
  • What Is Cloud Security?
  • The Shared Responsibility Model
    • How Responsibility Changes by Service Model
    • Who Owns the Risk?
  • New Environment, New Security Rules
    • Ephemeral Infrastructure
    • Identity Is the New Perimeter
    • Everything Is API-Driven
    • The Realities of Speed and Scale
  • Core Domains of Cloud Security
    • Identity and Access Management
    • Data Protection
    • Configuration Management
    • Workload Protection
    • Cloud Logging and Monitoring
    • Network Security in the Cloud
    • Secrets Management
    • Cloud Security and Security Operations
  • Delivering Security at Scale
    • Infrastructure as Code and Secure Defaults
    • DevSecOps and Cultural Shift
  • Third-Party Dependencies in the Cloud
  • Strategic Cloud Security
    • Cloud Architecture and Threat Modeling
    • Governance and Accountability in the Cloud
    • Maturity in Cloud Security
  • Common Cloud Security Risks
  • Cloud Security in Practice
    • When Cloud Security Comes Together
    • When Cloud Security Falls Apart
      • Scenario 1: The public storage exposure
      • Scenario 2: The over-permissioned identity
      • Scenario 3: Logging was never enabled
  • Career Paths in Cloud Security
  • Building a Cloud Security Mindset
  • Conclusion
• 9. Governance, Risk, and Compliance
  • The Fundamentals of GRC
    • What Is GRC?
    • Why GRC Exists
    • Why GRC Fails in Practice
  • Governance: How Security Decisions Actually Get Made
    • Core Components of Governance
    • Decision Making and Accountability
    • Governance in Action
    • Governance Failure Scenario
  • Risk Management: The Core of Cybersecurity
    • Risk in the Real World
    • Identifying What Could Go Wrong
    • Risk Assessment and Prioritization
    • Treating the Threat
    • Communicating Risk Impact
    • Risk Failure Scenario
  • Compliance: Necessary, but Not Sufficient
    • What Compliance Is and What Its Not
    • Common Frameworks and Standards
    • The Compliance Trap
    • Compliance as a Business Enabler
    • Compliance Failure Scenario
  • Where GRC Breaks Down
  • The Missing Link: The BISO Function
    • What a BISO Actually Does
    • The BISO as a Culture Driver
  • Security Culture and Shared Responsibility
    • Why Culture Matters More Than Controls
    • Security Is Everyones Responsibility
    • Security Awareness as a Core Element of GRC
    • What Good Security Awareness Looks Like
    • Culture Failure Scenario
    • Building a Security Culture
  • Maturity in GRC Programs
  • Careers in GRC and Business-Focused Security Roles
  • Building a GRC Mindset
  • Conclusion
• Index

pokaż cały spis treści

ukryj recenzje