Information Security

The Information Security and Privacy Quick Reference: The Essential Handbook for Every CISO, CSO, and Chief Privacy Officer is an updated, convenient, and accurate desk reference for information privacy practitioners who need fast and easy access to the latest guidance, laws, and standards that apply in their field. This book is the most effective resource for information security professionals who need immediate and correct solutions to common and rarely encountered problems.

We live in an interconnected world, where security problems like terrorism are spilling across borders, and globalized data networks and e-commerce platforms are reshaping the world economy. This means that states' jurisdictions and rule systems clash. How have they negotiated their differences over freedom and security? Of Privacy and Power investigates how the European Union and United States, the two major regulatory systems in world politics, have regulated privacy and security, and how their agreements and disputes have reshaped the transatlantic relationship.

Cybersecurity Standards and Frameworks: A Comprehensive Guide to Resilient Cyber Defense In today's digital landscape, cyber threats are increasing in frequency and sophistication, putting organizations at risk of data breaches, operational disruptions, and reputational damage. To combat these evolving risks, industry-recognized cybersecurity standards and frameworks have emerged as essential tools for establishing robust security practices and fostering a culture of cyber resilience. This comprehensive guide provides an in-depth exploration of the most widely adopted cybersecurity ...

Dive into the world of ethical hacking and cybersecurity with Shimon Brathwaite's enlightening guide, "How to Make a Living Hacking Computers." This book demystifies the path to becoming a professional hacker - not one who breaks into systems with malicious intent, but a skilled expert who is hired to find vulnerabilities and strengthen the security of digital infrastructures. Brathwaite, with his extensive experience in the field, offers a comprehensive look into the various aspects of ethical hacking. Whether you're a complete novice curious about the field or a tech enthusiast looking to...

Kali Purple is a comprehensive security tool that combines offensive and defensive methodologies, providing a versatile platform for vulnerability assessment and penetration testing. Originating from Kali Linux, it combines aggressive tactics with vigilant defenses, embodying the purple teaming concept. This book aims to serve as a comprehensive guide for mastering Kali Purple, catering to both beginners and seasoned professionals. It covers various aspects of security, including application, database, wireless, and cloud security. Beyond technical aspects, it also discusses social ...

A major new work, a hybrid of history, journalism, and memoir, about the modern Freedom of Information Act - FOIA - and the horrifying, decades-old government misdeeds that it is unable to demystify, from one of America's most celebrated writers.

This book is the best recipe for becoming an expert on information security. If you aspire to be a security expert by taking the CISSP exam, there is no shortage of books that claim to be the ultimate solution to information security. They dupe students into thinking that they are the only books on the market for this specific subject. Well, they may be dubbed as the ultimate but are they the most reader-friendly books for this dry subject? Will there be any juice to be consumed by the reader and fiber to digest? Are those books written easy to under language? If those book authors have ...

Based on insights gained from academic research, as well as interviews with UK-based security professionals from various sectors, The Psychology of Information Security describes how resolving conflicts between security compliance and human behavior explains the importance of careful risk management and how to align a security program with wider business objectives, providing methods and techniques to engage stakeholders and encourage buy-in.

Are You Ready to Master the CompTIA Security+ and Elevate Your IT Security Career? In an era where digital threats loom large and cybersecurity skills are in high demand, simply understanding the basics isn’t enough. SysAdmins and IT professionals face a constant challenge: staying ahead of evolving cyber threats while effectively managing complex security protocols. Navigating the intricate landscape of IT security can be overwhelming. Are you equipped to protect sensitive data against sophisticated cyber-attacks? Can you confidently implement and manage robust security systems? Failing ...

As information security professionals, risk evaluation and mitigation are the key parts of our job. Dealing with risk is the theme of our roles, be it as firewall engineers, auditors, penetration testers, management, etc. The key functions of the Security and Risk Management domain are risk analysis and mitigation as well as ensuring the best organizational structure for a robust information security system is in place. In this area of expertise, it’s the quality of the people that can make or break an organization. By “quality of the people”, we mean knowledgeable and experienced ...

Every organization today faces an ever-changing set of threats in this digital landscape. Understanding how to develop a functional information security program to protect your organization’s reputation and brand from being tarnished due to a breach of your company’s sensitive information is more critical than ever. Developing a functional program that sets up the best information security practices across the organization’s operational workflows, is the leading practice for protecting against a possible breach.

Are you ready to revolutionize your organization’s approach to cybersecurity and learn GRC? In a world where threats evolve faster than ever, achieving robust Governance, Risk Management, and Compliance (GRC) is no longer optional—it’s essential. Yet, countless organizations struggle to bridge the gap between lofty compliance standards and practical implementation. Imagine having a proven roadmap that transforms the complexities of cybersecurity frameworks into a clear, actionable plan tailored to your organization’s unique needs while giving you a practical understanding of GRC. ...

In this updated edition, the authors show you how zero trust lets you focus on building strong authentication, authorization, and encryption throughout, while providing compartmentalized access and better operational agility. You'll learn the architecture of a zero trust network, including how to build one using currently available technology.

Did you know that getting your CISSP Certification could be one of the best decisions you’d ever make? If you intend to pursue a career in the IT sector, now is the time to take serious action. It is no doubt that CISSP is one of the world’s most valued certification in information security. We cannot overemphasize the relevance of this certification because of the transformation taking place in the information technology sector, especially for cybersecurity companies who employ sophisticated security measures against digital and cyber theft or manipulation. Even with over a 25 year ...

Edward Snowden, the man who risked everything to expose the US government’s system of mass surveillance, reveals for the first time the story of his life, including how he helped to build that system and what motivated him to try to bring it down.

One of the least understood countries in the world, North Korea has long been known for its repressive regime. Yet it is far from being an impenetrable black box. Media flows covertly into the country, and fault lines are appearing in the government's sealed informational borders. Drawing on deeply personal interviews with North Korean defectors from all walks of life, ranging from propaganda artists to diplomats, Jieun Baek tells the story of North Korea's information underground.

Vol. 3 & 4: Mobile, Metadata, and the Machines Watching You Because it’s not paranoia if they really are listening, tracking, and triangulating your location. Welcome to the part of the fight where things get uncomfortable: mobile spyware, Stingrays disguised as friendly cell towers, rogue QR codes, AI-powered OSINT engines scraping your every move. This volume goes deeper: mobile OS lockdown, open-source tools that don’t betray you, quiet ways to communicate when the rest of the internet is on fire. We hit nodes, ransomware, privilege escalation, and Pegasus. We dissect Onion routing ...

Fundamentals, Networking, Threats, Attacks, Systems and many more - How to Prepare and Succeed. This book is a comprehensive guide to answering core cybersecurity questions that may arise during job interviews for a cybersecurity engineer or consultant position. It covers essential concepts and terminology expected to be known and understood by candidates, helping them become more confident in describing and demonstrating their knowledge during interviews. With this book, readers can verify their knowledge before their interview, identify areas they need to strengthen, and gain a solid ...

We live in a world where information takes on a life of its own and spreads rapidly. Faster than ever before. For some people, their lives depend on obtaining a steady stream of information as it affects their lives in the most telling ways. The daily news is the simplest example of this phenomenon. It is truly the lifeblood of society and helps us evolve into better informed individuals with every passing day. As one can tell, information on the whole comes at us from every direction. Its influence on business, politics, and government, banking, the STEM fields, and even the social ...

In today's digital age, data is the new currency. Businesses are collecting more information than ever before, and individuals are increasingly concerned about how their personal details are used and protected. This is where the IAPP CIPP/US (Certified Information Privacy Professional/United States) certification steps in, acting as your passport to a thriving career in the ever-evolving field of data privacy.