ایجاد یک برنامه جامع امنیت IT: راهنماهای عملی و بهترین شیوه‌ها

This book explains the ongoing war between private business and cyber criminals, state-sponsored attackers, terrorists, and hacktivist groups. Further, it explores the risks posed by trusted employees that put critical information at risk through malice, negligence, or simply making a mistake. It clarifies the historical context of the current situation as it relates to cybersecurity, the challenges facing private business, and the fundamental changes organizations can make to better protect themselves. The problems we face are difficult, but they are not hopeless. Cybercrime continues to grow at an astounding rate. With constant coverage of cyber-attacks in the media, there is no shortage of awareness of increasing threats. Budgets have increased and executives are implementing stronger defenses. Nonetheless, breaches continue to increase in frequency and scope. __Building a Comprehensive IT Security Program__shares why organizations continue to fail to secure their critical information assets and explains the internal and external adversaries facing organizations today. This book supplies the necessary knowledge and skills to protect organizations better in the future by implementing a comprehensive approach to security. Jeremy Wittkop’s security expertise and critical experience provides insights into topics such as: * Who is attempting to steal information and why? * What are critical information assets? * How are effective programs built? * How is stolen information capitalized? * How do we shift the paradigm to better protect our organizations? * How we can make the cyber world safer for everyone to do business? This book explains the ongoing war between private business and cyber criminals, state-sponsored attackers, terrorists, and hacktivist groups. Further, it explores the risks posed by trusted employees that put critical information at risk through malice, negligence, or simply making a mistake. It clarifies the historical context of the current situation as it relates to cybersecurity, the challenges facing private business, and the fundamental changes organizations can make to better protect themselves. The problems we face are difficult, but they are not hopeless. Cybercrime continues to grow at an astounding rate. With constant coverage of cyber-attacks in the media, there is no shortage of awareness of increasing threats. Budgets have increased and executives are implementing stronger defenses. Nonetheless, breaches continue to increase in frequency and scope. Building a Comprehensive IT Security Program shares why organizations continue to fail to secure their critical information assets and explains the internal and external adversaries facing organizations today. This book supplies the necessary knowledge and skills to protect organizations better in the future by implementing a comprehensive approach to security. Jeremy Wittkop's security expertise and critical experience provides insights into topics such as: Who is attempting to steal information and why? What are critical information assets? How are effective programs built? How is stolen information capitalized? How do we shift the paradigm to better protect our organizations? How we can make the cyber world safer for everyone to do business? Front Matter....Pages i-xix The Problem We Are Facing....Pages 1-20 Protecting Critical Assets....Pages 21-39 Monetizing Risk....Pages 41-53 Security Intelligence Model....Pages 55-72 Incident Response Planning....Pages 73-87 The People Problem....Pages 89-105 Assigning Accountability....Pages 107-120 Shifting the Paradigm....Pages 121-136 The Definition of Insanity....Pages 137-152 Deja Vu....Pages 153-165 The Information Security Community....Pages 167-176 Partnering with Governments....Pages 177-188 Back Matter....Pages 189-195