Read While You Wait - Get immediate ebook access, if available*, when you order a print book

cover
Open Access This content is freely available online to anyone, anywhere at any time.

Rational Cybersecurity for Business

The Security Leaders' Guide to Business Alignment

Authors: Blum, Dan

  • The first comprehensive field guide to cybersecurity-business alignment
  • Focuses on six areas to maximize the effectiveness of your cybersecurity program: risk management, control baseline, security culture, IT rationalization, access control, and cyber-resilience
  • Includes more than 50 keys to alignment and advice on how to scale them for businesses of different types and sizes
see more benefits

Buy this book

eBook  
  • ISBN 978-1-4842-5952-8
  • The ebook is not yet available online.
Softcover 39,51 €
price for Spain (gross)
  • Due: August 26, 2020
  • ISBN 978-1-4842-5951-1
  • Free shipping for individuals worldwide
  • Immediate ebook access, if available*, with your print order
  • The final prices may differ from the prices shown due to specifics of VAT rules
About this book

Use the guidance in this comprehensive field guide to gain the support of your top executives for aligning a rational cybersecurity plan with your business. You will learn how to improve working relationships with stakeholders in complex digital businesses, IT, and development environments. You will know how to prioritize your security program, and motivate and retain your team.

Misalignment between security and your business can start at the top at the C-suite or happen at the line of business, IT, development, or user level. It has a corrosive effect on any security project it touches. But it does not have to be like this. 

Author Dan Blum presents valuable lessons learned from interviews with over 70 security and business leaders. You will discover how to successfully solve issues related to: risk management, operational security, privacy protection, hybrid cloud management, security culture and user awareness, and communication challenges.

This open access book presents six priority areas to focus on to maximize the effectiveness of your cybersecurity program: risk management, control baseline, security culture, IT rationalization, access control, and cyber-resilience. Common challenges and good practices are provided for businesses of different types and sizes. And more than 50 specific keys to alignment are included.

What You Will Learn

  • Improve your security culture: clarify security-related roles, communicate effectively to businesspeople, and hire, motivate, or retain outstanding security staff by creating a sense of efficacy
  • Develop a consistent accountability model, information risk taxonomy, and risk management framework
  • Adopt a security and risk governance model consistent with your business structure or culture, manage policy, and optimize security budgeting within the larger business unit and CIO organization IT spend
  • Tailor a control baseline to your organization’s maturity level, regulatory requirements, scale, circumstances, and critical assets
  • Help CIOs, Chief Digital Officers, and other executives to develop an IT strategy for curating cloud solutions and reducing shadow IT, building up DevSecOps and Disciplined Agile, and more
  • Balance access control and accountability approaches, leverage modern digital identity standards to improve digital relationships, and provide data governance and privacy-enhancing capabilities
  • Plan for cyber-resilience: work with the SOC, IT, business groups, and external sources to coordinate incident response and to recover from outages and come back stronger
  • Integrate your learnings from this book into a quick-hitting rational cybersecurity success plan


Who This Book Is For

Chief Information Security Officers (CISOs) and other heads of security, security directors and managers, security architects and project leads, and other team members providing security leadership to your business

About the authors

Dan Blum is an internationally recognized cybersecurity and risk management strategist. He is a former Golden Quill Award-winning VP, Distinguished Analyst at Gartner, Inc., and has served as the de facto head of security for startups and consulting companies. He's advised hundreds of corporations, universities, and government organizations, and currently partners with top media, analyst firms, and clients to produce cybersecurity thought leadership research and to deliver cybersecurity workshops and coaching for security leaders.    


Table of contents (10 chapters)

Table of contents (10 chapters)
  • Executive Overview

    Pages 1-29

    Blum, Dan

  • Identify and Align Security-Related Roles

    Pages 31-60

    Blum, Dan

  • Put the Right Security Governance Model in Place

    Pages 61-89

    Blum, Dan

  • Strengthen Security Culture Through Communications and Awareness Programs

    Pages 91-122

    Blum, Dan

  • Manage Risk in the Language of Business

    Pages 123-156

    Blum, Dan

Buy this book

eBook  
  • ISBN 978-1-4842-5952-8
  • The ebook is not yet available online.
Softcover 39,51 €
price for Spain (gross)
  • Due: August 26, 2020
  • ISBN 978-1-4842-5951-1
  • Free shipping for individuals worldwide
  • Immediate ebook access, if available*, with your print order
  • The final prices may differ from the prices shown due to specifics of VAT rules

Services for this book

Loading...

Bibliographic Information

Bibliographic Information
Book Title
Rational Cybersecurity for Business
Book Subtitle
The Security Leaders' Guide to Business Alignment
Authors
Copyright
2020
Publisher
Apress
Copyright Holder
Dan Blum
eBook ISBN
978-1-4842-5952-8
DOI
10.1007/978-1-4842-5952-8
Softcover ISBN
978-1-4842-5951-1
Edition Number
1
Number of Pages
XXVI, 333
Number of Illustrations
102 b/w illustrations
Topics

*immediately available upon purchase as print book shipments may be delayed due to the COVID-19 crisis. ebook access is temporary and does not include ownership of the ebook. Only valid for books with an ebook version. Springer Reference Works and instructor copies are not included.