Security Management

This award-winning and best-selling business handbook for digital transformation is now fully updated and expanded with the latest research and new case studies! Over the last five years, The DevOps Handbook has been the definitive guide for taking the successes laid out in the best-selling The Phoenix Project and applying them in any organization. Now, with this fully updated and expanded edition, it’s time to take DevOps out of the IT department and apply it across the full business.

The title of this audiobook, Can I See Your Hands, refers to one of the key outcomes of this audiobook - being able to tell whether or not people want to cause us harm. To put it very simply, if you can see someone's hands and they are not concealing them, holding a weapon or positioning to strike you, one's levels of trust and confidence can increase. This simple example can serve as a reminder to all of us in many of the complex moments we have to deal with, and difficult decisions we have to make, in everyday life.

Emphasizing greater clarity on risk practice, this new edition maintains a focus on the ability to apply "planned clairvoyance" to peer into the future. The book begins by analyzing the various systems that can be used to apply risk management. It provides a fundamental introduction to the basics associated with particular techniques, clarifying the essential concepts of risk and how they apply in projects. The second part of the book presents the specific techniques necessary to successfully implement the systems described in Part I.

Unmasking the Social Engineer: The Human Element of Security focuses on combining the science of understanding nonverbal communications with the knowledge of how social engineers, scam artists, and con men use these skills to build feelings of trust and rapport in their targets. The author helps listeners understand how to identify and detect social engineers and scammers by analyzing their nonverbal behavior. Unmasking the Social Engineer shows how attacks work.

Are you struggling to navigate the complexities of the ISO 27001:2022 standard? Look no further! This comprehensive guide, written by renowned cybersecurity expert Bruce Brown, CISSP, CGRC, is your ultimate companion to mastering the world of information security management. While the official ISO 27001:2022 standard provides a concise overview, it often leaves readers craving more detailed insights. At a mere 20 pages and a price tag of 135 EURO, it may not offer the depth and clarity you need.

The topic of security culture is mysterious and confusing to most leaders. But it doesn't have to be. In The Security Culture Playbook, Perry Carpenter and Kai Roer deliver experience-driven, actionable insights into how to transform your organization's security culture and reduce human risk at every level. This book exposes the gaps in how organizations have traditionally approached human risk, and it provides security and business executives with the necessary information and tools needed to understand, measure, and improve facets of security culture across the organization.

Cyber risk management is one of the most urgent issues facing enterprises today. This book presents a detailed framework for designing, developing, and implementing a cyber risk management program that addresses your company's specific needs. Ideal for corporate directors, senior executives, security risk practitioners, and auditors at many levels, this guide offers both the strategic insight and tactical guidance you're looking for.

The Cyber Risk Handbook is the practitioner's guide to implementing, measuring, and improving the counter-cyber capabilities of the modern enterprise. The first resource of its kind, this book provides authoritative guidance for real-world situations, and cross-functional solutions for enterprise-wide improvement.

In The Management of Savagery, Max Blumenthal excavates the real story behind America's dealings with the world and shows how the extremist forces that now threaten peace across the globe are the inevitable flowering of America's imperial designs. Washington's secret funding of the mujahedin provoked the Russian invasion of Afghanistan in 1979. With guns and money, the United States has ever since sustained the extremists, including Osama Bin Laden, who have become its enemies.

Family Inc. is not just a personal finance book; it is a "how to" guide for achieving financial security. By borrowing time tested principles used in business and applying them to family financial planning, Family Inc. provides a powerful framework for navigating all of life's big financial decisions. You will learn how to think strategically as the Family Chief Financial Officer; how to make investments in education and yourself to benefit your career; how to manage your hard-earned money to make it work for you; and much more.

In How to Measure Anything in Cybersecurity Risk, Second Edition, a pioneering information security professional and a leader in quantitative analysis methods deliver yet another eye-opening text applying the quantitative language of risk analysis to cybersecurity. In the book, the authors demonstrate how to quantify uncertainty and shed light on how to measure seemingly intangible goals. It's a practical guide to improving risk assessment with a straightforward and simple framework.

Cyber Wars gives you the dramatic inside stories of some of the world's biggest cyber attacks. These are the game-changing hacks that make organisations around the world tremble and leaders stop and consider just how safe they really are. Charles Arthur provides a gripping account of why each hack happened, what techniques were used, what the consequences were and how they could have been prevented. Cyber attacks are some of the most frightening threats currently facing business leaders, and this book provides a deep insight into understanding how they work.

This essential guide, with its dozens of examples and case studies, breaks down every element of the development and management of a cybersecurity program for the executive. From understanding the need, to core risk management principles, to threats, tools, roles, and responsibilities, this book walks the listener through each step of developing and implementing a cybersecurity program. If you're a business manager or executive who needs to make sense of cybersecurity, this audiobook demystifies it for you.

Tailored for small-business owners and entrepreneurs like yourself who are looking for long-term financial planning and wealth management, The Business Owner's Guide to Financial Freedom reveals the secrets behind successfully investing in your business while bypassing Wall Street-influenced financial planners.

Identity and access management (IAM) is a framework of business processes, policies, and technologies that facilitate the management of digital identities to ensure that users only gain access to data when they have the appropriate credentials.

Few people have made decisions as momentous as Eisenhower, nor has one person had to make such a varied range of them. From D-Day to Little Rock, from the Korean War to Cold War crises, from the Red Scare to the Missile Gap controversies, he was able to give our country eight years of peace and prosperity by relying on a core set of principles. These were informed by his heritage and upbringing, his strong character and his personal discipline, but he also avoided making himself the center of things. He tried to be the calmest man in the room, not the loudest.

Farnoosh Torabi is familiar with fear. Growing up in the 1980s as the daughter of Iranian immigrants, she was warned to always play it safe. She spent her childhood immersed in fear—of rejection, loneliness, missed opportunities, and falling short of her potential. Of course, now her mother says, “It all worked out, didn’t it?” Funnily enough, it did. Farnoosh came to the realization that fear never limited her. Instead, it has become a friend, opening her world and equipping her with the tools and street smarts to navigate life’s trials and thrive on her own terms.

It's all hands on deck for a cross-functional team of executives and engineers to develop a modern automated governance process that satisfies regulators without slowing the company's ability to meet customer demands and compete in the market. In the vein of bestselling titles The Phoenix Project and The Unicorn Project, Investments Unlimited helps organizations radically rethink how they handle audit, compliance, and security for their software systems.

In the corporate world, "vulture" investors in distressed securities serve the same cleanup function as vultures do in the natural world: they deal with failing companies, digest bad debt, and mop up after bankruptcies. Since this market's structural and legal complexities create greater inefficiencies than in other investment fields, it's a style of investing that can make money during both booms and busts.

Ransomware is a type of malicious attack where attackers encrypt an organization’s data and demand payment to restore access. This Ransomware Profile identifies the Cybersecurity Framework Version 1.1 security objectives that support identifying, protecting against, detecting, responding to, and recovering from ransomware events. The profile can be used as a guide to managing the risk of ransomware events. That includes helping to gauge an organization’s level of readiness to counter ransomware threats and to deal with the potential consequences of events.