Description
The technology landscape is changing fast; whether it is cloud computing, Zero Trust, AI, or the upcoming innovations of quantum computing. AI is already disrupting businesses and even everyday life. A successful security professional at any level of experience would need three key skills, namely functional acumen, business acumen, and communication skills.
This book enables a foundational understanding of several concepts across technical domains like networking, identity, cloud computing, and threat intelligence, functional security concepts like risk management, and running security programs. This book also brings about the essential connection of security program to the overall organizational objectives. And lastly, how to manage talent, measure security objectives, and communicate the risks and outcomes effectively.
By the end of this book, you will have the knowledge to appreciate the highly intertwined dimensions of security programs across people, process, and technology. This will prepare you to ensure that security objectives are directly aligned with your organization's business goals and to communicate that alignment effectively. Furthermore, you will gain several grounding concepts that are immediately useful for any practicing or aspiring CISO.
? Foundational security principles, concepts, and their implementation.
? Risk management: frameworks, standards, and controls.
? Security of ports, protocols and services, cloud, and ZT.
? Understand IAM using RBAC, PAM, & SoD.
? Using threat intelligence to enrich CTEM, VM, and Incident Response.
? Drive security culture with human centric efforts.
? Managing talent with a competency framework.
? Design and implement a measurable and resilient security program for a successful business.
? Art of communication: from technical insights to boardroom. Who this book is for
This book is ideal for current security leaders, CISOs, risk professionals, and aspiring cybersecurity professionals. Even business executives seeking to understand the strategic importance of cybersecurity would find the concepts easier to comprehend and apply. Table of Contents
1. The Triad of Security
2. About Managing Risks
3. Role of Standards and Controls
4. Role of Privacy Principles
5. Security and Privacy by Design
6. Key Security Technologies
7. Identity and Access Management
8. Cloud Security
9. Zero Trust
10. Threats and Exposure Management
11. Incident Response and Planning
12. Cyber Resilience
13. Human Centric Security
14. Managing Security Talent
15. Managing a Security Program
16. Business and Security Strategy
17. Effective Communication
18. Preparing For and Presenting to the Board