Description
Book SynopsisOrganizations of all sizes struggle to secure their data in a constantly evolving digital landscape. Expanding digital footprints and the rapid expansion of cloud strategies arising from the COVID-19 pandemic increase an organization's attack surface. When combined with limited resources caused by the cybersecurity skills gap, securing small and mid-sized business IT infrastructures becomes more complicated. With limited staffing and budgetary restrictions, small businesses need to create cost-effective, security-driven programs that protect data while also meeting increasingly stringent compliance requirements.
This book bridges the gap between complex technical language and business objectives to create a security-first review of the security and compliance landscapes. Starting from the premise that with security comes compliance, this book starts by defining security-first and then walking readers through the process of creating a holistic security and compliance program.
Table of Contents
Chapter 1 Into the Mind of a Malicious Actor
Chapter 2 Reviewing the Compliance Landscape
Chapter 3 Compliance Risk
Chapter 4 Looking at Risk through a Security Lens
Chapter 5 How to Set Controls
Chapter 6 Continuous Monitoring
Chapter 7 Vendor Risk Management: Securing the Supply Chain
Chapter 8 Calculating the Total Cost of Compliance
Chapter 9 Information Security Audit: The What, How, and Why
Chapter 10 Cyber Liability Insurance
Chapter 11 Cybersustai nability: Ethical Data Handling for Corporate Responsibility
Chapter 12 Magic 8 Ball Says "Yes"
