000			04671nam a22003854u 4500
001			10.1002/9781394213986
003			Wiley
005			20251030120310.0
007			cr nn 008mam|a
008			240322t2024||||xxu fs| |0|| 0|eng||
020			_a9781394213986 _qelectronic
024	7		_a10.1002/9781394213986 _2doi
041			_aeng
100	1		_aBayuk, Jennifer L. _4aut _991713
245	1	0	_aStepping Through Cybersecurity Risk Management _bA Systems Thinking Approach _h[electronic resource] _cJennifer L. Bayuk
250			_a1
260			_bWiley _c2024
264		1	_bWiley _c2024
300			_a336pp.;
336			_atext _btxt _2rdacontent
337			_acomputer _bc _2rdamedia
338			_aonline resource _bcr _2rdacarrier
347			_atext file _2rdaft
347			_bPDF
520			_aStepping Through Cybersecurity Risk Management Authoritative resource delivering the professional practice of cybersecurity from the perspective of enterprise governance and risk management. Stepping Through Cybersecurity Risk Management covers the professional practice of cybersecurity from the perspective of enterprise governance and risk management. It describes the state of the art in cybersecurity risk identification, classification, measurement, remediation, monitoring and reporting. It includes industry standard techniques for examining cybersecurity threat actors, cybersecurity attacks in the context of cybersecurity-related events, technology controls, cybersecurity measures and metrics, cybersecurity issue tracking and analysis, and risk and control assessments. The text provides precise definitions for information relevant to cybersecurity management decisions and recommendations for collecting and consolidating that information in the service of enterprise risk management. The objective is to enable the reader to recognize, understand, and apply risk-relevant information to the analysis, evaluation, and mitigation of cybersecurity risk. A well-rounded resource, the text describes both reports and studies that improve cybersecurity decision support. Composed of 10 chapters, the author provides learning objectives, exercises and quiz questions per chapter in an appendix, with quiz answers and exercise grading criteria available to professors. Written by a highly qualified professional with significant experience in the field, Stepping Through Cybersecurity Risk Management includes information on: Threat actors and networks, attack vectors, event sources, security operations, and CISO risk evaluation criteria with respect to this activity Control process, policy, standard, procedures, automation, and guidelines, along with risk and control self assessment and compliance with regulatory standards Cybersecurity measures and metrics, and corresponding key risk indicators The role of humans in security, including the "three lines of defense" approach, auditing, and overall human risk management Risk appetite, tolerance, and categories, and analysis of alternative security approaches via reports and studies Providing comprehensive coverage on the topic of cybersecurity through the unique lens of perspective of enterprise governance and risk management, Stepping Through Cybersecurity Risk Management is an essential resource for professionals engaged in compliance with diverse business risk appetites, as well as regulatory requirements such as FFIEC, HIIPAA, and GDPR, as well as a comprehensive primer for those new to the field. A complimentary forward by Professor Gene Spafford explains why "This book will be helpful to the newcomer as well as to the hierophants in the C-suite. The newcomer can read this to understand general principles and terms. The C-suite occupants can use the material as a guide to check that their understanding encompasses all it should."
650		4	_aGeneral & Introductory Security Management _991714
650		4	_aRisk, Contingency & Crisis Management _991715
650		4	_aComputer Security & Cryptography _991094
653	0	0	_aCybersecurity; Information Security; Technology Risk; Operational Risk; Risk Management; Security Metrics; Information Security Management; Cybersecurity Program Management; Cybersecurity Incident Management; cyber attack
776	0	8	_iPrinted edition: _z9781394213955
856	4	0	_uhttps://doi.org/10.1002/9781394213986 _aWiley Online Library
856	4	0	_uhttps://onlinelibrary.wiley.com/action/showBook?doi=10.1002%2F9781394213986 _aWiley Online Library
856	4	2	_3Cover Image _uhttps://onlinelibrary.wiley.com/cms/asset/26706bb1-caab-4079-9ef7-a9cf6dbfdde6/9781394213986.cover.gif _aWiley Online Library
999			_c67052 _d67052