國立虎尾科技大學 |

Rational Cybersecurity for Business = The Security Leaders' Guide to Business Alignment /

Record Type:	Language materials, printed : Monograph/item
Title/Author:	Rational Cybersecurity for Business/ by Dan Blum.
Reminder of title:	The Security Leaders' Guide to Business Alignment /
Author:	Blum, Dan.
Description:	XXVI, 333 p. 102 illus.online resource. :
Contained By:	Springer Nature eBook
Subject:	Data protection. -
Online resource:	https://doi.org/10.1007/978-1-4842-5952-8
ISBN:	9781484259528

Rational Cybersecurity for Business = The Security Leaders' Guide to Business Alignment /
Blum, Dan.

Rational Cybersecurity for BusinessThe Security Leaders' Guide to Business Alignment /[electronic resource] :by Dan Blum. - 1st ed. 2020. - XXVI, 333 p. 102 illus.online resource.

Chapter 1: Executive Overview -- Chapter 2: Identify and Align Security-Related Roles -- Chapter 3: Put the Right Security Governance Model in Place -- Chapter 4: Strengthen Security Culture through Effective Communications and Awareness Programs -- Chapter 5: Manage Risk in the Language of Business -- Chapter 6: Establish a Control Baseline -- Chapter 7: Simplify and Rationalize IT and Security -- Chapter 8: Control Access with Minimal Drag on the Business -- Chapter 9: Institute Resilience Through Detection, Response, and Recovery -- Chapter 10: Create Your Rational Cybersecurity Success Plan -- Glossary of Terms and Acronyms. .

Open Access

Use the guidance in this comprehensive field guide to gain the support of your top executives for aligning a rational cybersecurity plan with your business. You will learn how to improve working relationships with stakeholders in complex digital businesses, IT, and development environments. You will know how to prioritize your security program, and motivate and retain your team. Misalignment between security and your business can start at the top at the C-suite or happen at the line of business, IT, development, or user level. It has a corrosive effect on any security project it touches. But it does not have to be like this. Author Dan Blum presents valuable lessons learned from interviews with over 70 security and business leaders. You will discover how to successfully solve issues related to: risk management, operational security, privacy protection, hybrid cloud management, security culture and user awareness, and communication challenges. This open access book presents six priority areas to focus on to maximize the effectiveness of your cybersecurity program: risk management, control baseline, security culture, IT rationalization, access control, and cyber-resilience. Common challenges and good practices are provided for businesses of different types and sizes. And more than 50 specific keys to alignment are included. You will: Improve your security culture: clarify security-related roles, communicate effectively to businesspeople, and hire, motivate, or retain outstanding security staff by creating a sense of efficacy Develop a consistent accountability model, information risk taxonomy, and risk management framework Adopt a security and risk governance model consistent with your business structure or culture, manage policy, and optimize security budgeting within the larger business unit and CIO organization IT spend Tailor a control baseline to your organization’s maturity level, regulatory requirements, scale, circumstances, and critical assets Help CIOs, Chief Digital Officers, and other executives to develop an IT strategy for curating cloud solutions and reducing shadow IT, building up DevSecOps and Disciplined Agile, and more Balance access control and accountability approaches, leverage modern digital identity standards to improve digital relationships, and provide data governance and privacy-enhancing capabilities Plan for cyber-resilience: work with the SOC, IT, business groups, and external sources to coordinate incident response and to recover from outages and come back stronger Integrate your learnings from this book into a quick-hitting rational cybersecurity success plan.

ISBN: 9781484259528

Standard No.: 10.1007/978-1-4842-5952-8doiSubjects--Topical Terms:

557764
Data protection.

LC Class. No.: QA76.9.A25

Dewey Class. No.: 005.8

Rational Cybersecurity for Business = The Security Leaders' Guide to Business Alignment /
LDR:04649nam a22004095i 4500 001 1022265
003 DE-He213
005 20200812102734.0
007 cr nn 008mamaa
008 210318s2020 xxu| s |||| 0|eng d
020 $a 9781484259528 $9 978-1-4842-5952-8
024 7 $a 10.1007/978-1-4842-5952-8 $2 doi
035 $a 978-1-4842-5952-8
050 4 $a QA76.9.A25
072 7 $a UR $2 bicssc
072 7 $a COM053000 $2 bisacsh
072 7 $a UR $2 thema
082 0 4 $a 005.8 $2 23
100 1 $a Blum, Dan. $e author. $4 aut $4 http://id.loc.gov/vocabulary/relators/aut $3 1317975
245 1 0 $a Rational Cybersecurity for Business $h [electronic resource] : $b The Security Leaders' Guide to Business Alignment / $c by Dan Blum.
250 $a 1st ed. 2020.
264 1 $a Berkeley, CA : $b Apress : $b Imprint: Apress, $c 2020.
300 $a XXVI, 333 p. 102 illus. $b online resource.
336 $a text $b txt $2 rdacontent
337 $a computer $b c $2 rdamedia
338 $a online resource $b cr $2 rdacarrier
347 $a text file $b PDF $2 rda
505 0 $a Chapter 1: Executive Overview -- Chapter 2: Identify and Align Security-Related Roles -- Chapter 3: Put the Right Security Governance Model in Place -- Chapter 4: Strengthen Security Culture through Effective Communications and Awareness Programs -- Chapter 5: Manage Risk in the Language of Business -- Chapter 6: Establish a Control Baseline -- Chapter 7: Simplify and Rationalize IT and Security -- Chapter 8: Control Access with Minimal Drag on the Business -- Chapter 9: Institute Resilience Through Detection, Response, and Recovery -- Chapter 10: Create Your Rational Cybersecurity Success Plan -- Glossary of Terms and Acronyms. .
506 0 $a Open Access
520 $a Use the guidance in this comprehensive field guide to gain the support of your top executives for aligning a rational cybersecurity plan with your business. You will learn how to improve working relationships with stakeholders in complex digital businesses, IT, and development environments. You will know how to prioritize your security program, and motivate and retain your team. Misalignment between security and your business can start at the top at the C-suite or happen at the line of business, IT, development, or user level. It has a corrosive effect on any security project it touches. But it does not have to be like this. Author Dan Blum presents valuable lessons learned from interviews with over 70 security and business leaders. You will discover how to successfully solve issues related to: risk management, operational security, privacy protection, hybrid cloud management, security culture and user awareness, and communication challenges. This open access book presents six priority areas to focus on to maximize the effectiveness of your cybersecurity program: risk management, control baseline, security culture, IT rationalization, access control, and cyber-resilience. Common challenges and good practices are provided for businesses of different types and sizes. And more than 50 specific keys to alignment are included. You will: Improve your security culture: clarify security-related roles, communicate effectively to businesspeople, and hire, motivate, or retain outstanding security staff by creating a sense of efficacy Develop a consistent accountability model, information risk taxonomy, and risk management framework Adopt a security and risk governance model consistent with your business structure or culture, manage policy, and optimize security budgeting within the larger business unit and CIO organization IT spend Tailor a control baseline to your organization’s maturity level, regulatory requirements, scale, circumstances, and critical assets Help CIOs, Chief Digital Officers, and other executives to develop an IT strategy for curating cloud solutions and reducing shadow IT, building up DevSecOps and Disciplined Agile, and more Balance access control and accountability approaches, leverage modern digital identity standards to improve digital relationships, and provide data governance and privacy-enhancing capabilities Plan for cyber-resilience: work with the SOC, IT, business groups, and external sources to coordinate incident response and to recover from outages and come back stronger Integrate your learnings from this book into a quick-hitting rational cybersecurity success plan.
650 0 $a Data protection. $3 557764
650 1 4 $a Security. $3 1114130
710 2 $a SpringerLink (Online service) $3 593884
773 0 $t Springer Nature eBook
776 0 8 $i Printed edition: $z 9781484259511
776 0 8 $i Printed edition: $z 9781484259535
856 4 0 $u https://doi.org/10.1007/978-1-4842-5952-8
912 $a ZDB-2-CWD
912 $a ZDB-2-SXPC
912 $a ZDB-2-SOB
950 $a Professional and Applied Computing (SpringerNature-12059)
950 $a Professional and Applied Computing (R0) (SpringerNature-43716)