Stepping Through Cybersecurity Risk Management (Record no. 67052)
[ view plain ]
| 000 -LEADER | |
|---|---|
| fixed length control field | 04671nam a22003854u 4500 |
| 001 - CONTROL NUMBER | |
| control field | 10.1002/9781394213986 |
| 003 - CONTROL NUMBER IDENTIFIER | |
| control field | Wiley |
| 005 - DATE AND TIME OF LATEST TRANSACTION | |
| control field | 20251030120310.0 |
| 007 - PHYSICAL DESCRIPTION FIXED FIELD--GENERAL INFORMATION | |
| fixed length control field | cr nn 008mam|a |
| 008 - FIXED-LENGTH DATA ELEMENTS--GENERAL INFORMATION | |
| fixed length control field | 240322t2024||||xxu fs| |0|| 0|eng|| |
| 020 ## - INTERNATIONAL STANDARD BOOK NUMBER | |
| International Standard Book Number | 9781394213986 |
| Qualifying information | electronic |
| 024 7# - OTHER STANDARD IDENTIFIER | |
| Standard number or code | 10.1002/9781394213986 |
| Source of number or code | doi |
| 041 ## - LANGUAGE CODE | |
| Language code of text/sound track or separate title | eng |
| 100 1# - MAIN ENTRY--PERSONAL NAME | |
| Personal name | Bayuk, Jennifer L. |
| Relator code | aut |
| 9 (RLIN) | 91713 |
| 245 10 - TITLE STATEMENT | |
| Title | Stepping Through Cybersecurity Risk Management |
| Remainder of title | A Systems Thinking Approach |
| Medium | [electronic resource] |
| Statement of responsibility, etc. | Jennifer L. Bayuk |
| 250 ## - EDITION STATEMENT | |
| Edition statement | 1 |
| 260 ## - Date publicare | |
| Name of publisher, distributor, etc. | Wiley |
| Date of publication, distribution, etc. | 2024 |
| 264 #1 - PRODUCTION, PUBLICATION, DISTRIBUTION, MANUFACTURE, AND COPYRIGHT NOTICE | |
| Name of producer, publisher, distributor, manufacturer | Wiley |
| Date of production, publication, distribution, manufacture, or copyright notice | 2024 |
| 300 ## - PHYSICAL DESCRIPTION | |
| Extent | 336pp.; |
| 336 ## - CONTENT TYPE | |
| Content type term | text |
| Content type code | txt |
| Source | rdacontent |
| 337 ## - MEDIA TYPE | |
| Media type term | computer |
| Media type code | c |
| Source | rdamedia |
| 338 ## - CARRIER TYPE | |
| Carrier type term | online resource |
| Carrier type code | cr |
| Source | rdacarrier |
| 347 ## - DIGITAL FILE CHARACTERISTICS | |
| File type | text file |
| Source | rdaft |
| 347 ## - DIGITAL FILE CHARACTERISTICS | |
| Encoding format | |
| 520 ## - SUMMARY, ETC. | |
| Summary, etc. | Stepping Through Cybersecurity Risk Management Authoritative resource delivering the professional practice of cybersecurity from the perspective of enterprise governance and risk management. Stepping Through Cybersecurity Risk Management covers the professional practice of cybersecurity from the perspective of enterprise governance and risk management. It describes the state of the art in cybersecurity risk identification, classification, measurement, remediation, monitoring and reporting. It includes industry standard techniques for examining cybersecurity threat actors, cybersecurity attacks in the context of cybersecurity-related events, technology controls, cybersecurity measures and metrics, cybersecurity issue tracking and analysis, and risk and control assessments. The text provides precise definitions for information relevant to cybersecurity management decisions and recommendations for collecting and consolidating that information in the service of enterprise risk management. The objective is to enable the reader to recognize, understand, and apply risk-relevant information to the analysis, evaluation, and mitigation of cybersecurity risk. A well-rounded resource, the text describes both reports and studies that improve cybersecurity decision support. Composed of 10 chapters, the author provides learning objectives, exercises and quiz questions per chapter in an appendix, with quiz answers and exercise grading criteria available to professors. Written by a highly qualified professional with significant experience in the field, Stepping Through Cybersecurity Risk Management includes information on: Threat actors and networks, attack vectors, event sources, security operations, and CISO risk evaluation criteria with respect to this activity Control process, policy, standard, procedures, automation, and guidelines, along with risk and control self assessment and compliance with regulatory standards Cybersecurity measures and metrics, and corresponding key risk indicators The role of humans in security, including the "three lines of defense" approach, auditing, and overall human risk management Risk appetite, tolerance, and categories, and analysis of alternative security approaches via reports and studies Providing comprehensive coverage on the topic of cybersecurity through the unique lens of perspective of enterprise governance and risk management, Stepping Through Cybersecurity Risk Management is an essential resource for professionals engaged in compliance with diverse business risk appetites, as well as regulatory requirements such as FFIEC, HIIPAA, and GDPR, as well as a comprehensive primer for those new to the field. A complimentary forward by Professor Gene Spafford explains why "This book will be helpful to the newcomer as well as to the hierophants in the C-suite. The newcomer can read this to understand general principles and terms. The C-suite occupants can use the material as a guide to check that their understanding encompasses all it should." |
| 650 #4 - SUBJECT ADDED ENTRY--TOPICAL TERM | |
| Topical term or geographic name as entry element | |
| 9 (RLIN) | 91714 |
| 650 #4 - SUBJECT ADDED ENTRY--TOPICAL TERM | |
| Topical term or geographic name as entry element | |
| 9 (RLIN) | 91715 |
| 650 #4 - SUBJECT ADDED ENTRY--TOPICAL TERM | |
| Topical term or geographic name as entry element | |
| 9 (RLIN) | 91094 |
| 653 00 - INDEX TERM--UNCONTROLLED | |
| Uncontrolled term | Cybersecurity; Information Security; Technology Risk; Operational Risk; Risk Management; Security Metrics; Information Security Management; Cybersecurity Program Management; Cybersecurity Incident Management; cyber attack |
| 776 08 - ADDITIONAL PHYSICAL FORM ENTRY | |
| Relationship information | Printed edition: |
| International Standard Book Number | 9781394213955 |
| 856 40 - ELECTRONIC LOCATION AND ACCESS | |
| Uniform Resource Identifier | <a href="https://doi.org/10.1002/9781394213986">https://doi.org/10.1002/9781394213986</a> |
| Host name | Wiley Online Library |
| 856 40 - ELECTRONIC LOCATION AND ACCESS | |
| Uniform Resource Identifier | <a href="https://onlinelibrary.wiley.com/action/showBook?doi=10.1002%2F9781394213986">https://onlinelibrary.wiley.com/action/showBook?doi=10.1002%2F9781394213986</a> |
| Host name | Wiley Online Library |
| 856 42 - ELECTRONIC LOCATION AND ACCESS | |
| Materials specified | Cover Image |
| Uniform Resource Identifier | <a href="https://onlinelibrary.wiley.com/cms/asset/26706bb1-caab-4079-9ef7-a9cf6dbfdde6/9781394213986.cover.gif">https://onlinelibrary.wiley.com/cms/asset/26706bb1-caab-4079-9ef7-a9cf6dbfdde6/9781394213986.cover.gif</a> |
| Host name | Wiley Online Library |
No items available.