Information Security

The Information Security and Privacy Quick Reference: The Essential Handbook for Every CISO, CSO, and Chief Privacy Officer is an updated, convenient, and accurate desk reference for information privacy practitioners who need fast and easy access to the latest guidance, laws, and standards that apply in their field. This book is the most effective resource for information security professionals who need immediate and correct solutions to common and rarely encountered problems.

A major new work, a hybrid of history, journalism, and memoir, about the modern Freedom of Information Act - FOIA - and the horrifying, decades-old government misdeeds that it is unable to demystify, from one of America's most celebrated writers.

Cybersecurity Standards and Frameworks: A Comprehensive Guide to Resilient Cyber Defense In today's digital landscape, cyber threats are increasing in frequency and sophistication, putting organizations at risk of data breaches, operational disruptions, and reputational damage. To combat these evolving risks, industry-recognized cybersecurity standards and frameworks have emerged as essential tools for establishing robust security practices and fostering a culture of cyber resilience. This comprehensive guide provides an in-depth exploration of the most widely adopted cybersecurity ...

Dive into the world of ethical hacking and cybersecurity with Shimon Brathwaite's enlightening guide, "How to Make a Living Hacking Computers." This book demystifies the path to becoming a professional hacker - not one who breaks into systems with malicious intent, but a skilled expert who is hired to find vulnerabilities and strengthen the security of digital infrastructures. Brathwaite, with his extensive experience in the field, offers a comprehensive look into the various aspects of ethical hacking. Whether you're a complete novice curious about the field or a tech enthusiast looking to...

Kali Purple is a comprehensive security tool that combines offensive and defensive methodologies, providing a versatile platform for vulnerability assessment and penetration testing. Originating from Kali Linux, it combines aggressive tactics with vigilant defenses, embodying the purple teaming concept. This book aims to serve as a comprehensive guide for mastering Kali Purple, catering to both beginners and seasoned professionals. It covers various aspects of security, including application, database, wireless, and cloud security. Beyond technical aspects, it also discusses social ...

In this updated edition, the authors show you how zero trust lets you focus on building strong authentication, authorization, and encryption throughout, while providing compartmentalized access and better operational agility. You'll learn the architecture of a zero trust network, including how to build one using currently available technology.

"Conquer the CISSP Exam: Your Guide to Success as a Certified Information Systems Security Professional" is your comprehensive resource for mastering the Certified Information Systems Security Professional (CISSP) exam. This guide offers a deep dive into each of the eight CISSP domains, providing clear explanations and practical insights to ensure you understand and can apply key concepts. Covering topics such as Security and Risk Management, Asset Security, Security Engineering, Communications and Network Security, Identity and Access Management, Security Assessment and Testing, Security ...

This book is the best recipe for becoming an expert on information security. If you aspire to be a security expert by taking the CISSP exam, there is no shortage of books that claim to be the ultimate solution to information security. They dupe students into thinking that they are the only books on the market for this specific subject. Well, they may be dubbed as the ultimate but are they the most reader-friendly books for this dry subject? Will there be any juice to be consumed by the reader and fiber to digest? Are those books written easy to under language? If those book authors have ...

Every organization today faces an ever-changing set of threats in this digital landscape. Understanding how to develop a functional information security program to protect your organization’s reputation and brand from being tarnished due to a breach of your company’s sensitive information is more critical than ever. Developing a functional program that sets up the best information security practices across the organization’s operational workflows, is the leading practice for protecting against a possible breach.

Did you know that getting your CISSP Certification could be one of the best decisions you’d ever make? If you intend to pursue a career in the IT sector, now is the time to take serious action. It is no doubt that CISSP is one of the world’s most valued certification in information security. We cannot overemphasize the relevance of this certification because of the transformation taking place in the information technology sector, especially for cybersecurity companies who employ sophisticated security measures against digital and cyber theft or manipulation. Even with over a 25 year ...

Are you ready to revolutionize your organization’s approach to cybersecurity and learn GRC? In a world where threats evolve faster than ever, achieving robust Governance, Risk Management, and Compliance (GRC) is no longer optional—it’s essential. Yet, countless organizations struggle to bridge the gap between lofty compliance standards and practical implementation. Imagine having a proven roadmap that transforms the complexities of cybersecurity frameworks into a clear, actionable plan tailored to your organization’s unique needs while giving you a practical understanding of GRC. ...

Are You Ready to Master the CompTIA Security+ and Elevate Your IT Security Career? In an era where digital threats loom large and cybersecurity skills are in high demand, simply understanding the basics isn’t enough. SysAdmins and IT professionals face a constant challenge: staying ahead of evolving cyber threats while effectively managing complex security protocols. Navigating the intricate landscape of IT security can be overwhelming. Are you equipped to protect sensitive data against sophisticated cyber-attacks? Can you confidently implement and manage robust security systems? Failing ...

As information security professionals, risk evaluation and mitigation are the key parts of our job. Dealing with risk is the theme of our roles, be it as firewall engineers, auditors, penetration testers, management, etc. The key functions of the Security and Risk Management domain are risk analysis and mitigation as well as ensuring the best organizational structure for a robust information security system is in place. In this area of expertise, it’s the quality of the people that can make or break an organization. By “quality of the people”, we mean knowledgeable and experienced ...

Edward Snowden, the man who risked everything to expose the US government’s system of mass surveillance, reveals for the first time the story of his life, including how he helped to build that system and what motivated him to try to bring it down.

In The DevSecOps Playbook: Deliver Continuous Security at Speed, the chief information and information security officer at Wiley, Sean D. Mack, delivers an insightful and practical discussion of how to keep your business secure. You'll learn how to leverage the classic triad of people, process, and technology to build strong cybersecurity infrastructure and practices. You'll also discover the shared responsibility model at the core of DevSecOps as you explore the principles and best practices that make up contemporary frameworks.

Fundamentals, Networking, Threats, Attacks, Systems and many more - How to Prepare and Succeed. This book is a comprehensive guide to answering core cybersecurity questions that may arise during job interviews for a cybersecurity engineer or consultant position. It covers essential concepts and terminology expected to be known and understood by candidates, helping them become more confident in describing and demonstrating their knowledge during interviews. With this book, readers can verify their knowledge before their interview, identify areas they need to strengthen, and gain a solid ...

We live in the age of disinformation - of organized deception. Spy agencies pour vast resources into hacking, leaking, and forging data, often with the goal of weakening the very foundation of liberal democracy: trust in facts. Thomas Rid, a renowned expert on technology and national security, was one of the first to sound the alarm, even before the 2016 election. But this is not new. The story of modern disinformation begins with the clash between communism and capitalism after the Russian Revolution.

One of the least understood countries in the world, North Korea has long been known for its repressive regime. Yet it is far from being an impenetrable black box. Media flows covertly into the country, and fault lines are appearing in the government's sealed informational borders. Drawing on deeply personal interviews with North Korean defectors from all walks of life, ranging from propaganda artists to diplomats, Jieun Baek tells the story of North Korea's information underground.

Based on insights gained from academic research, as well as interviews with UK-based security professionals from various sectors, The Psychology of Information Security describes how resolving conflicts between security compliance and human behavior explains the importance of careful risk management and how to align a security program with wider business objectives, providing methods and techniques to engage stakeholders and encourage buy-in.

Unlock the secrets to mastering the NIST 800 risk management process in record time with this powerful 2-in-1 bundle! Introducing Information Systems Security NIST 800 2-in-1, featuring both RMF ISSO Foundation Guide and RMF ISSO: NIST 800-53. This comprehensive series is your ultimate roadmap to success, designed to simplify the complexities of NIST 800-53 security controls and show you the actionable steps required throughout the RMF process.