Description
Book SynopsisSecurity operations departments are growing in importance and recognition; they are responsible for the secure day to day running of an organisation's network, endpoint, application, identity and physical security controls. This book walks you through how to establish and develop a highly effective security operations team. This requires more than just purchasing a series of information security tools, plugging them in and hoping for the best. As you will learn, it's about hiring the right people to work together, understanding the business the team is working to protect, knowing when to build a tool rather than buy, and crafting procedures that allow the team to detect and respond to a wide variety of security threats.
Trade Review'Mike masterfully combines a coverage of the fundamental building blocks of a security operations program with the tactical insight he has gained from his experience in the trenches. This book holds valuable insights for both the budding security engineer and the seasoned veteran.' -- Chad Butler * Director - Application Security, Disney *
'A good read and food for thought for Security Operations professionals.' -- David King * Regional Information Security Officer EMEA, Omnicom Media Group *
'Beginners and veterans alike will learn from a professional who has clearly earned his wisdom. This sensible and practical guide to security operations is on my desktop, not in my bookshelf.' -- Jeff Costlow * Deputy CISO, ExtraHop Networks *
Table of Contents
- Introduction
- Establishing A Security Operations Team
- Monitoring Networks and Clouds
- Managing Endpoint Devices
- Protecting Data
- Identity and Access Management
- Incident Detection and Response
- Vulnerability Management
- Building Relationships and Trust
- Beyond the Enterprise
- Red Teaming and Threat Hunting
- Building Bespoke Tools
- Physical Security
- Conclusion
