Information Security

Based on insights gained from academic research, as well as interviews with UK-based security professionals from various sectors, The Psychology of Information Security describes how resolving conflicts between security compliance and human behavior explains the importance of careful risk management and how to align a security program with wider business objectives, providing methods and techniques to engage stakeholders and encourage buy-in.

Kali Purple is a comprehensive security tool that combines offensive and defensive methodologies, providing a versatile platform for vulnerability assessment and penetration testing. Originating from Kali Linux, it combines aggressive tactics with vigilant defenses, embodying the purple teaming concept. This book aims to serve as a comprehensive guide for mastering Kali Purple, catering to both beginners and seasoned professionals. It covers various aspects of security, including application, database, wireless, and cloud security. Beyond technical aspects, it also discusses social ...

In this updated edition, the authors show you how zero trust lets you focus on building strong authentication, authorization, and encryption throughout, while providing compartmentalized access and better operational agility. You'll learn the architecture of a zero trust network, including how to build one using currently available technology.

Dive into the world of ethical hacking and cybersecurity with Shimon Brathwaite's enlightening guide, "How to Make a Living Hacking Computers." This book demystifies the path to becoming a professional hacker - not one who breaks into systems with malicious intent, but a skilled expert who is hired to find vulnerabilities and strengthen the security of digital infrastructures. Brathwaite, with his extensive experience in the field, offers a comprehensive look into the various aspects of ethical hacking. Whether you're a complete novice curious about the field or a tech enthusiast looking to...

Small Wars, Big Data provides groundbreaking perspectives for how small wars can be better strategized and favorably won to the benefit of the local population.

The Cyber Threat Landscape: A Reference Guide of Infiltration Techniques for Cyber Security Professionals BOOK 1 Reconnaissance and a Few Other Cyber Techniques Unlock the secrets of cyber threats with The Cyber Threat Landscape, the ultimate reference guide designed for cybersecurity professionals. This essential book series delves deep into the tactics and techniques used by adversaries to infiltrate and compromise systems. Book 1: Reconnaissance and a Few Other Cyber Techniques offers a comprehensive exploration of the initial stages of cyber attacks. From active scanning to social ...

Elevate your organization's information security to new heights with "Mastering ISO 27001:2022 — A Comprehensive Guide to Information Security Management." This simplified guide is tailored for business leaders seeking success with ISO 27001, offering practical strategies to implement robust information security practices. Comprehensive Coverage: Delve into ISO 27001:2022 and gain a comprehensive understanding of information security management systems (ISMS). Explore key concepts from risk assessment to control implementation, ensuring thorough compliance with ISO standards. Cutting-Edge...

Did you know that getting your CISSP Certification could be one of the best decisions you’d ever make? If you intend to pursue a career in the IT sector, now is the time to take serious action. It is no doubt that CISSP is one of the world’s most valued certification in information security. We cannot overemphasize the relevance of this certification because of the transformation taking place in the information technology sector, especially for cybersecurity companies who employ sophisticated security measures against digital and cyber theft or manipulation. Even with over a 25 year ...

Here are proven methods for building an online income stream. Maybe you dream of making money with an online business, but haven’t tried so far because you’d have to quit your current job and enter the risky world of Internet startups. Or because you think you need lots of capital and way too much time. If these reasons sound familiar, Dave Lindahl and Jon Rozek beg to differ.

"SOC" provides a comprehensive overview of SOC in the digital age, delving into its evolution, core principles, and ecosystem. It covers the architectural foundations including design, scalability, and integration with existing systems. The book explores threat intelligence, risk management, and advanced defensive strategies like proactive threat hunting and counter-intelligence. It highlights key SOC tools and technologies, emphasizing machine learning and AI. Human factors, team dynamics, and managing stress in high-stakes environments are also addressed. The book is meant to aid in the ...

In no other time in recent history have leaders in every industry and on every continent grappled with so many changes that have independently and simultaneously undermined their ability to lead. The Prepared Leader encapsulates more than two decades of the authors' research to convey how it has positioned them to navigate through the distinct challenges of today and tomorrow. Their insights have implications for every leader in every industry and every worker at every level.

Welcome to "The Pithy Guide to Personal Computer and Internet Security for Non-Security People." In today's digital age, the importance of computer and internet security cannot be overstated. With cyber threats becoming increasingly sophisticated, it's crucial for everyone, regardless of their technical expertise, to understand the basics of protecting their personal information and devices. This guide is designed for individuals who may not have a background in security but want to learn how to safeguard their digital lives. We'll start with the fundamental concepts of computer and ...

Navigating the complex terrain of SOC2 compliance can be a daunting task. "A Step-by-Step Guide to SOC2 Type 1 Attestation and Type 2 Certification" is your trusted companion on this journey, offering a comprehensive, accessible, and practical roadmap to achieving and maintaining SOC2 compliance. Penned by renowned information security expert, Russell D. Nomer, CISSP, this guide leverages over 30 years of experience and delivers invaluable insights in an engaging and reader-friendly manner. From understanding the importance of SOC2 attestation to conducting successful audits and mitigating ...

Vol. 3 & 4: Mobile, Metadata, and the Machines Watching You Because it’s not paranoia if they really are listening, tracking, and triangulating your location. Welcome to the part of the fight where things get uncomfortable: mobile spyware, Stingrays disguised as friendly cell towers, rogue QR codes, AI-powered OSINT engines scraping your every move. This volume goes deeper: mobile OS lockdown, open-source tools that don’t betray you, quiet ways to communicate when the rest of the internet is on fire. We hit nodes, ransomware, privilege escalation, and Pegasus. We dissect Onion routing ...

Released by the Freedom of Information Act. This document is a thorough description of how the CIA recommends interrogating a subject. To get the information that is needed there is nothing withheld short of torture. For example in "Threats and Fears," the CIA authors note that "the threat of coercion usually weakens or destroys resistance more effectively than coercion itself. The threat to inflict pain, for example, can trigger fears more damaging than the immediate sensation of pain."

In "The CISO's guide to Surviving Machiavellian Politics", Russell D. Nomer, CISSP draws upon the combination of academic lessons and his own unique experiences and observations to share lessons learned from: Over three decades of technology and security consulting spanning multiple industries Studying Political Communications, Political Science and Politics & Values at The George Washington University Completing Morton Blackwell Leadership Institute Training Obtaining a Bachelor of Science Degree with honors in Security Systems from SUNY Farmingdale Obtaining a CISSP Obtaining ITIL ...

ISO 27001 Documentation KIT for Certification All Templates for Processes, Procedures, Work Instructions & Forms to Build a Fully Compliant ISMS Introduction: The ISO 27001 Documentation KIT is your ultimate solution for creating and maintaining a fully compliant Information Security Management System (ISMS). This all-in-one kit includes editable templates for processes, procedures, work instructions, forms, and logs—all aligned with ISO 27001 standards to streamline your certification process. Benefits: Complete Solution: All necessary templates for a compliant ISMS. Time-Saving: Ready-...

The NIST Cybersecurity Framework, intelligently designed to synchronize with top-tier industry practices, is a treasure trove for all cybersecurity enthusiasts, IT professionals, or organizational leaders determined to enhance their information systems security. This book, with its ability to translate complex concepts into accessible lessons, has the power to elevate beginners into adept cybersecurity practitioners.

ISO 27001:2022 Risk Assessment & Treatment Methodology: A Comprehensive Guide Achieving ISO 27001:2022 compliance is crucial for organizations aiming to strengthen their information security posture. This guide offers a step-by-step methodology for risk assessment and treatment, detailing everything from identifying critical assets and assessing cyber threats to creating risk treatment strategies. It includes real-world examples, case studies, and a focus on continuous monitoring, ensuring that businesses can address risks, meet regulatory standards, and prepare for ISO 27001 certification....

We live in a world where information takes on a life of its own and spreads rapidly. Faster than ever before. For some people, their lives depend on obtaining a steady stream of information as it affects their lives in the most telling ways. The daily news is the simplest example of this phenomenon. It is truly the lifeblood of society and helps us evolve into better informed individuals with every passing day. As one can tell, information on the whole comes at us from every direction. Its influence on business, politics, and government, banking, the STEM fields, and even the social ...