Inne
The Art of Cyber Security. A practical guide to winning the war on cyber crime
IT Governance Publishing, Gary Hibberd
This book redefines cyber security through the lens of creativity and classical strategy. It begins by exploring the mindset of the cyber defender as both artist and martial artist, highlighting the importance of intuition, flow, and individual perspective. It challenges rigid educational models and argues for a more adaptive, expressive approach to security thinking.Building on this foundation, the second part interprets Sun Tzu’s The Art of War in a cyber context. Each chapter reframes traditional military concepts—deception, preparation, leadership, and adaptability—through the realities of digital threats. The text emphasizes how timeless strategies apply to the modern information battlefield.By blending philosophy, history, and practical insight, the book offers a unique take on digital defense. It invites readers to reflect on their approach, question assumptions, and embrace both logic and creativity. This is not just a guide to threats and tactics, but a call to rethink what it means to be a cyber security professional today.
Stéphane Eyskens, Scott Hanselman
Designing effective cloud-native architectures on Azure often feels overwhelming—especially when trying to translate complex requirements into reliable solutions. This book solves that problem by giving you a structured, visual guide to building modern systems that are scalable, secure, and production-ready.You'll discover how to plan, design, and communicate Azure-based architectures using practical reference diagrams mapped to real-world use cases. Organized by domains including infrastructure, applications, data, container orchestrators, AI, and security, each chapter walks you through the key services, patterns, and decisions that underpin successful solutions.Throughout the book, you'll find over 40 detailed architecture maps, created and curated by a seasoned Microsoft cloud solution architect. These maps illustrate how to align Azure services with business goals, manage hybrid and multi-cloud complexity, and incorporate best practices for governance, resilience, and cost optimization.This book gives you more than just diagrams; it offers the confidence to design cloud solutions that scale and perform. Whether you're modernizing a legacy stack or building greenfield applications, the Azure Cloud Native Architecture Mapbook is your trusted design companion from concept to delivery.
The California Privacy Rights Act (CPRA). An implementation and compliance guide
IT Governance Publishing, Preston Bukaty
This comprehensive guide to the California Privacy Rights Act (CPRA) explores its impact on businesses and consumers within California. The book begins with a clear explanation of CPRA’s territorial and material jurisdiction, providing readers with an understanding of where and how the law applies. It delves into key definitions critical for businesses and individuals alike, covering terms such as personal information, pseudonymization, and consumer rights. One of the focal points of the book is the examination of the rights granted to consumers, including the right to access, delete, and opt-out of data sales. Alongside this, it addresses the business obligations, such as the need for privacy notices and compliance with security requirements. The book also offers an analysis of penalties for non-compliance and breach notification procedures, making it an essential resource for understanding the legal landscape of consumer privacy in California. It concludes with an overview of related laws that further influence how businesses must manage customer data.
The Cyber Resilience Handbook. Achieve Full Cyber Resilience with ISO 27001 and ISO 22301
IT Governance Publishing, Andrew Pattison
This book begins by introducing cyber resilience and its significance in today’s business landscape. It explains how resilience goes beyond traditional cybersecurity, incorporating elements like governance, protection, detection, and recovery to ensure organizational stability in the face of cyber threats. The first chapter outlines the core concepts, including the integration of legal and assurance frameworks.The second section focuses on achieving cyber resilience with ISO 27001 and ISO 22301. These globally recognized standards offer a structured methodology for building a resilient infrastructure. The author explains how to implement these frameworks effectively, ensuring businesses can address cybersecurity challenges and maintain continuity in operations. This section also covers integrating ISO 27001 with other systems to optimize resilience.The final section provides practical strategies for implementing cyber resilience, including project initiation, leadership, risk assessments, and performance evaluation. It also discusses certification processes and maintaining resilience over time, including through third-party vendors. The book concludes with guidance on creating a culture of security and continuous improvement within organizations.
IT Governance Publishing, Alan Calder
This book offers a deep dive into cybersecurity, equipping professionals with tools and frameworks to protect organizations from diverse cyber threats. It covers critical areas such as information security, cyber resilience, and the regulatory and contractual requirements organizations must meet. The book delves into threat anatomy, analyzing technical, human, physical, and third-party vulnerabilities, and includes real-world case studies like the TalkTalk breach and WannaCry ransomware attack.It also emphasizes third-party risk management to ensure robust security practices across all areas. The book introduces the IT Governance Cyber Resilience Framework (CRF), a structured method for managing critical systems, guiding readers through the processes of identification, detection, response, recovery, and continual improvement. Practical strategies in areas like asset management, network security, and staff training are included.The final section offers actionable steps for implementing cybersecurity practices and introduces reference frameworks like NIST and ISO 27001 for compliance and ongoing improvement. With real-world examples and actionable frameworks, this guide is essential for professionals aiming to enhance their organization's cyber resilience.
Chad Maurice, Jeremiah Ginn, William Copeland
Threat hunting is a concept that takes traditional cyber defense and spins it onto its head. It moves the bar for network defenses beyond looking at the known threats and allows a team to pursue adversaries that are attacking in novel ways that have not previously been seen. To successfully track down and remove these advanced attackers, a solid understanding of the foundational concepts and requirements of the threat hunting framework is needed. Moreover, to confidently employ threat hunting in a business landscape, the same team will need to be able to customize that framework to fit a customer’s particular use case.This book breaks down the fundamental pieces of a threat hunting team, the stages of a hunt, and the process that needs to be followed through planning, execution, and recovery. It will take you through the process of threat hunting, starting from understanding cybersecurity basics through to the in-depth requirements of building a mature hunting capability. This is provided through written instructions as well as multiple story-driven scenarios that show the correct (and incorrect) way to effectively conduct a threat hunt.By the end of this cyber threat hunting book, you’ll be able to identify the processes of handicapping an immature cyber threat hunt team and systematically progress the hunting capabilities to maturity.
IT Governance Publishing, Leron Zinatullin
In today’s cybersecurity landscape, the human factor is crucial in information security. This book explores how human behavior often conflicts with security policies. The first part introduces key concepts in security and risk management, focusing on psychological factors like risk perception, trust, and decision-making.As the book progresses, it offers practical strategies to overcome these psychological barriers, such as improving communication, fostering trust, and aligning security policies with human behavior. Later chapters focus on creating a security culture where collaboration between security professionals, employees, and leaders is essential for success.The journey encourages readers to view security as a human-centered issue, not just a technical one. By integrating psychological theory with practical insights, the book helps security professionals address complex challenges and build a more secure and cooperative organization, enabling them to align security efforts with human behavior effectively.
The Ransomware Threat Landscape. Prepare for, recognise and survive ransomware attacks
IT Governance Publishing, Alan Calder
The Ransomware Threat Landscape offers an in-depth examination of ransomware, explaining how it works, its modes of access, and the consequences of attacks. The book begins by detailing the mechanisms of ransomware, how cybercriminals exploit vulnerabilities, and the damage it causes to organizations. It further explores the types of ransomware, their infection methods, and how attackers use ransomware for financial gain.The guide provides practical, actionable advice on basic and advanced cybersecurity measures to protect against ransomware. Topics like cybersecurity hygiene, staff awareness, and the importance of creating an anti-ransomware program are covered. The book emphasizes the role of a well-structured risk management framework and its application in preventing attacks and mitigating fallout from infections.For organizations of all sizes, the book offers tailored controls to strengthen defenses. It also explains the steps needed for a comprehensive recovery plan. Advanced prevention strategies for larger enterprises are discussed, making this guide suitable for IT professionals, security experts, and organizational leaders aiming to protect their systems from ransomware threats.