Cyber Risk Management: Prioritize Threats, Identify Vulnerabilities and Apply Controls / Edition 1

by Christopher J Hodson

Overview

Most organizations are undergoing a digital transformation of some sort and are looking to embrace innovative technology, but new ways of doing business inevitably lead to new threats which can cause irreparable financial, operational and reputational damage. In an increasingly punitive regulatory climate, organizations are also under pressure to be more accountable and compliant. Cyber Risk Management clearly explains the importance of implementing a cyber security strategy and provides practical guidance for those responsible for managing threat events, vulnerabilities and controls, including malware, data leakage, insider threat and Denial-of-Service.

Examples and use cases including Yahoo, Facebook and TalkTalk, add context throughout and emphasize the importance of communicating security and risk effectively, while implementation review checklists bring together key points at the end of each chapter. Cyber Risk Management analyzes the innate human factors around risk and how they affect cyber awareness and employee training, along with the need to assess the risks posed by third parties. Including an introduction to threat modelling, this book presents a data-centric approach to cyber risk management based on business impact assessments, data classification, data flow modelling and assessing return on investment. It covers pressing developments in artificial intelligence, machine learning, big data and cloud mobility, and includes advice on responding to risks which are applicable for the environment and not just based on media sensationalism.

Product Details

ISBN-13:	9780749484125
Publisher:	Kogan Page, Ltd.
Publication date:	06/25/2019
Edition description:	New Edition
Pages:	416
Product dimensions:	6.10(w) x 9.06(h) x 0.98(d)

About the Author

Christopher J Hodson is Chief Information Security Officer (CISO), EMEA at Tanium. He has 18 years' experience across the financial, retail, energy and media industry sectors and was previously CISO, EMEA and Data Protection Officer at Zscaler. He holds an MSc in Cyber Security from Royal Holloway and retains an active role in the Infosec industry through directorship of the Institute of Information Security Professionals (IISP) and membership of CompTIA's Cyber Security Committee.

Table of Contents

• Section - ONE: Contextualizing cybersecurity risk;
• • Chapter - 01: Why now? The only constant is change;
  • Chapter - 02: Technologies and security challenges;
  • Chapter - 03: Data breaches;
• Section - TWO: Cybersecurity programme management;
• • Chapter - 04: What are cybersecurity and cybercrime?;
  • Chapter - 05: Establishing a cybersecurity programme;
• Section - THREE: Actors, events and vulnerabilities;
• • Chapter - 06: Threat actors;
  • Chapter - 07: Threat events;
  • Chapter - 08: Vulnerabilities;
  • Chapter - 09: Controls;
• Section - FOUR: Conclusion – The cybersecurity risk equation explained;
• • Chapter - 10: Cyber risk management – A conclusion

Editorial Reviews

"An approachable resource that combines Chris's considerable business acumen and life experiences with risk management approaches and frameworks. This book will help executives and techies alike find common ground as they handle today's cybersecurity challenges."

James Stanger

"One of the most informative books currently on the market that demystifies the risk management process surrounding cyber security. Chris uses up-to-date case studies to highlight the most important aspects of cyber risk, informing the reader of current best practices within industry, how to implement it within your company and ultimately how you can keep your business safe against the growing number of cyber threats out there."

Tom Huckle

"Everyone in the cybersecurity universe is experiencing a pace of change and complexity which is simply unprecedented. Christopher Hodson has captured our universe as it is today. He covers the meteoric rise of LLMs and changes in social appetite to technology, with the keen insight, deep expertise and humour that we expect from him. He gives us a reason to feel optimistic about these changes. Whilst so much is changing, the importance of understanding cybersecurity remains paramount and constant."

Phil Owen MBE

"In the fast-paced world of cybersecurity, Cyber Risk Management is a guiding light. This book combines expertise with a friendly touch, making it easy for readers to tackle security challenges, no matter their technical background. Christopher Hodson has a knack for unravelling cybersecurity jargon and presenting complex ideas in a way that anyone can understand. He effortlessly blends theory with practical examples, ensuring readers not only grasp the basics but also gain insights into real-world scenarios.

Throughout the book, Hodson expertly covers the essentials of cybersecurity risk management, offering a solid framework for prioritizing threats, spotting vulnerabilities, and implementing effective controls. His conversational tone and patient approach make this book a valuable resource for both seasoned practitioners and newcomers.

"

Dana Wolf

"Cyber Risk Management serves as both a valuable playbook for security leaders building out their programs, and a much-needed reference for their key business and technical partners across the organization. Christopher Hodson reinforces and enriches each topic by drawing upon a diverse set of examples from emerging technologies, geopolitical and regulatory forces, historical events, and noteworthy incidents."

Ryan Kazanciyan

"This is an excellent book. Christopher Hodson writes as he speaks, with passion and clear understanding of a profession of which he has extensive experience and loves. Cyber Risk Management is extremely well researched and provides the reader with a simple-to-follow, guided journey through the cyber issues we face and the approaches we should be taking to cope with them. Hodson's pragmatic style demystifies complex issues making this a great read for both experienced security professionals and non-professionals alike. This is required reading for anyone who wants to intelligently manage cyber risk, whether a CISO, CFO or CEO!"

Amanda Finch

"A thoroughly enjoyable and insightful book that provides a well-rounded perspective into the interconnected world of cyber-risk management. The breadth of knowledge and the wonderful similes used to breakdown complex ideas show that Chris clearly knows his stuff!"

Atif Rafiq

"Written in an extremely accessible style and covering issues of vital importance to today's organisations, Cyber Risk Management offers a valuable resource for a managers and scholars looking to understand more about the topic, as well as for cyber security professionals seeking an experience-based account of the issues they are likely to be facing."

Steven Furnell

"The approach Chris suggests is sensible, methodical, and pragmatic, everything you want when running security for a business."

James Freestone

"Cyber Risk Management serves as both a valuable playbook for security leaders building out their programs, and a much-needed reference for their key business and technical partners across the organization. Christopher Hodson reinforces and enriches each topic by drawing upon a diverse set of examples from emerging technologies, geopolitical and regulatory forces, historical events, and noteworthy incidents."-- "Ryan Kazanciyan, CISO, Wiz"

"

In the fast-paced world of cybersecurity, Cyber Risk Management is a guiding light. This book combines expertise with a friendly touch, making it easy for readers to tackle security challenges, no matter their technical background. Christopher Hodson has a knack for unravelling cybersecurity jargon and presenting complex ideas in a way that anyone can understand. He effortlessly blends theory with practical examples, ensuring readers not only grasp the basics but also gain insights into real-world scenarios.

Throughout the book, Hodson expertly covers the essentials of cybersecurity risk management, offering a solid framework for prioritizing threats, spotting vulnerabilities, and implementing effective controls. His conversational tone and patient approach make this book a valuable resource for both seasoned practitioners and newcomers.

"-- "Dana Wolf, CEO and Co-Founder, YeshID"

"Everyone in the cybersecurity universe is experiencing a pace of change and complexity which is simply unprecedented. Christopher Hodson has captured our universe as it is today. He covers the meteoric rise of LLMs and changes in social appetite to technology, with the keen insight, deep expertise and humour that we expect from him. He gives us a reason to feel optimistic about these changes. Whilst so much is changing, the importance of understanding cybersecurity remains paramount and constant."-- "Phil Owen MBE, VP/Chief Security Officer, Telus Health"

"This is an excellent book. Christopher Hodson writes as he speaks, with passion and clear understanding of a profession of which he has extensive experience and loves. Cyber Risk Management is extremely well researched and provides the reader with a simple-to-follow, guided journey through the cyber issues we face and the approaches we should be taking to cope with them. Hodson's pragmatic style demystifies complex issues making this a great read for both experienced security professionals and non-professionals alike. This is required reading for anyone who wants to intelligently manage cyber risk, whether a CISO, CFO or CEO!"-- "Amanda Finch, CEO, Chartered Institute of Security Professionals"

From the Publisher