Security Management

This award-winning and best-selling business handbook for digital transformation is now fully updated and expanded with the latest research and new case studies! Over the last five years, The DevOps Handbook has been the definitive guide for taking the successes laid out in the best-selling The Phoenix Project and applying them in any organization. Now, with this fully updated and expanded edition, it’s time to take DevOps out of the IT department and apply it across the full business.

The title of this audiobook, Can I See Your Hands, refers to one of the key outcomes of this audiobook - being able to tell whether or not people want to cause us harm. To put it very simply, if you can see someone's hands and they are not concealing them, holding a weapon or positioning to strike you, one's levels of trust and confidence can increase. This simple example can serve as a reminder to all of us in many of the complex moments we have to deal with, and difficult decisions we have to make, in everyday life.

The topic of security culture is mysterious and confusing to most leaders. But it doesn't have to be. In The Security Culture Playbook, Perry Carpenter and Kai Roer deliver experience-driven, actionable insights into how to transform your organization's security culture and reduce human risk at every level. This book exposes the gaps in how organizations have traditionally approached human risk, and it provides security and business executives with the necessary information and tools needed to understand, measure, and improve facets of security culture across the organization.

This essential guide, with its dozens of examples and case studies, breaks down every element of the development and management of a cybersecurity program for the executive. From understanding the need, to core risk management principles, to threats, tools, roles, and responsibilities, this book walks the listener through each step of developing and implementing a cybersecurity program. If you're a business manager or executive who needs to make sense of cybersecurity, this audiobook demystifies it for you.

Are you struggling to navigate the complexities of the ISO 27001:2022 standard? Look no further! This comprehensive guide, written by renowned cybersecurity expert Bruce Brown, CISSP, CGRC, is your ultimate companion to mastering the world of information security management. While the official ISO 27001:2022 standard provides a concise overview, it often leaves readers craving more detailed insights. At a mere 20 pages and a price tag of 135 EURO, it may not offer the depth and clarity you need.

Unmasking the Social Engineer: The Human Element of Security focuses on combining the science of understanding nonverbal communications with the knowledge of how social engineers, scam artists, and con men use these skills to build feelings of trust and rapport in their targets. The author helps listeners understand how to identify and detect social engineers and scammers by analyzing their nonverbal behavior. Unmasking the Social Engineer shows how attacks work.

In The Management of Savagery, Max Blumenthal excavates the real story behind America's dealings with the world and shows how the extremist forces that now threaten peace across the globe are the inevitable flowering of America's imperial designs. Washington's secret funding of the mujahedin provoked the Russian invasion of Afghanistan in 1979. With guns and money, the United States has ever since sustained the extremists, including Osama Bin Laden, who have become its enemies.

In A Leader's Guide to Cybersecurity, Thomas Parenty and Jack Domet, who've spent over three decades in the field, present a timely, clear-eyed, and actionable framework that will empower senior executives and board members to become stewards of their companies' cybersecurity activities. Filled with tools, best practices, and strategies, A Leader's Guide to Cybersecurity will help boards navigate this seemingly daunting but extremely necessary transition.

In the corporate world, "vulture" investors in distressed securities serve the same cleanup function as vultures do in the natural world: they deal with failing companies, digest bad debt, and mop up after bankruptcies. Since this market's structural and legal complexities create greater inefficiencies than in other investment fields, it's a style of investing that can make money during both booms and busts.

The Cybersecurity Playbook is the step-by-step guide to protecting your organization from unknown threats and integrating good security habits into everyday business situations. This audiobook provides clear guidance on how to identify weaknesses, assess possible threats, and implement effective policies. Recognizing that an organization's security is only as strong as its weakest link, this audiobook offers specific strategies for employees at every level.

Cyber risk management is one of the most urgent issues facing enterprises today. This book presents a detailed framework for designing, developing, and implementing a cyber risk management program that addresses your company's specific needs. Ideal for corporate directors, senior executives, security risk practitioners, and auditors at many levels, this guide offers both the strategic insight and tactical guidance you're looking for.

Fascinating and highly listenable, Digital Resilience opens with the infamous 2013 Target attack, which compromised the credit card information of 40 million customers. In hindsight, the hack (like most today) was preventable. Data theft. Downed servers. Malware. Even human error can trigger cyber events anytime from anywhere around the globe. This powerful guide provides the resilience-building strategies you need to prevail - no matter what strikes.

Crisis is inevitable - but it doesn't have to torpedo your finances! Financial Security for Dummies offers advice to help you prep your finances for the next economic downturn, personal setback, pandemic, plague of locusts - or anything else life throws your way. This book contains the historical perspective and up-to-date info you'll need to navigate a wide range of personal financial challenges.

Cyber Wars gives you the dramatic inside stories of some of the world's biggest cyber attacks. These are the game-changing hacks that make organisations around the world tremble and leaders stop and consider just how safe they really are. Charles Arthur provides a gripping account of why each hack happened, what techniques were used, what the consequences were and how they could have been prevented. Cyber attacks are some of the most frightening threats currently facing business leaders, and this book provides a deep insight into understanding how they work.

Family Inc. is not just a personal finance book; it is a "how to" guide for achieving financial security. By borrowing time tested principles used in business and applying them to family financial planning, Family Inc. provides a powerful framework for navigating all of life's big financial decisions. You will learn how to think strategically as the Family Chief Financial Officer; how to make investments in education and yourself to benefit your career; how to manage your hard-earned money to make it work for you; and much more.

The Complete Strategy Collection, a compilation of ancient and historical philosophies, will increase your knowledge of strategy, conflict, and adversity throughout the ages, giving you valuable insight into the past while opening a window to the future. Although each of the works can be considered a manual or diagram for war or engaging in physical combat, the life skills embodied in each can be adapted to everyday life in modern society. Listen and learn how you, too, can take advantage of the strategies of war.

Identity and access management (IAM) is a framework of business processes, policies, and technologies that facilitate the management of digital identities to ensure that users only gain access to data when they have the appropriate credentials.

Ransomware is a type of malicious attack where attackers encrypt an organization’s data and demand payment to restore access. This Ransomware Profile identifies the Cybersecurity Framework Version 1.1 security objectives that support identifying, protecting against, detecting, responding to, and recovering from ransomware events. The profile can be used as a guide to managing the risk of ransomware events. That includes helping to gauge an organization’s level of readiness to counter ransomware threats and to deal with the potential consequences of events.

In How to Measure Anything in Cybersecurity Risk, Second Edition, a pioneering information security professional and a leader in quantitative analysis methods deliver yet another eye-opening text applying the quantitative language of risk analysis to cybersecurity. In the book, the authors demonstrate how to quantify uncertainty and shed light on how to measure seemingly intangible goals. It's a practical guide to improving risk assessment with a straightforward and simple framework.

This is a breakdown of the NIST risk management framework process for cybersecurity professionals getting into security compliance. It is written in layman's terms, without the convoluted way it is described in the NIST SP 800-37 revision 2. It goes into what the information system security officer does at each step in the process and where their attention should be focused. Although the main focus is on implementation of the NIST 800 RMF process, this book covers many of the main concepts on certifications, such as the ISC2 CAP.