Cyber security. The complete guide to cyber threats and protection

Front Cover Half-Title Page BCS, The Chartered Institute for It Title Page Copyright Page Dedication Contents List of figures and tables Author Acknowledgements Preface Part I Cyber Security Issues 1. Introduction Background The expectations of users and organisations Cyber security in the wider context 2. The Big Issues Some thoughts on social, political and other issues Cybercrime Cyber harassment or cyber bullying Cyber warfare Cyber surveillance Why we should care What makes cyber security difficult? 3. Cyber Targets Individual targets Business targets Critical national infrastructure (CNI) targets Building targets Academia and research targets Manufacturing and industry targets 4. Cyber Vulnerabilities and Impacts Cyber vulnerabilities Cyber impacts 5. Cyber Threats Types of attacker Motives: what drives an attacker Means Cyber-attack methods Types of cyber-attack and attack vectors The risks of conducting a cyber-attack Part II Cyber Security Solutions 6. Information Risk Management Overview A general view of risk Assets Threats Vulnerabilities Likelihood or probability Qualitative and quantitative assessments The risk management process 7. Business Continuity and Disaster Recovery Failures Business continuity Disaster recovery 8. Basic Cyber Security Steps General security advice Technical security advice Mobile working 9. Organisational Security Steps Security policies overview Directive policies Administrative policies Communal policies Technical policies 10. Awareness and Training Awareness Training 11. Information Sharing Trust Information classification Protection of shared information Anonymisation of shared information Routes to information sharing Part III Appendices Appendix A – Standards Cyber security standards ISO/IEC 27000 series standards Other relevant ISO standards Business continuity standards National Institute of Standards and Technology (NIST) standards Appendix B – Good Practice Guidelines General cyber security advice UK government cyber security advice Appendix C – Cyber Security Law UK Law EU Directives and Regulations Appendix D – Training and Qualifications Generic cyber security training and qualifications Specific cyber security training and qualifications Appendix E – Links to Other Useful Organisations Appendix F – Further Reading Appendix G – Abbreviations and Glossary Abbreviations Glossary Index Back Cover