Insider Threat : A Guide to Understanding, Detecting, and Defending Against the Enemy from Within

Julie E Mehan

ISBN 10: 1849288399 / ISBN 13: 9781849288392

Editore: ITGP, 2016

Riguardo questo articolo

nach der Bestellung gedruckt Neuware - Printed after ordering - Every type of organisation is vulnerable to insider abuse, errors or malicious attacks. These can impact reputation, operations and profitability, and expose data, harm the organisation, or deliver valuable intellectual property into competitors hands.Insiders can be current or former employees, contractors, or other business partners who have been granted authorised access to networks, systems or data, and all of them can bypass security measures through legitimate means.Product overviewInsider Threat A Guide to Understanding, Detecting, and Defending Against the Enemy from Within looks beyond perimeter protection tools, and shows how a security culture based on international best practice can help mitigate the insider threat to your security.It also provides some short-term quick fixes that can be applied as your organisations builds an effective insider threat programme.Read this book to learn:The seven organisational characteristics common to insider threat victims.The ten stages of a malicious attack.The ten steps of a successful insider threat programme.How to construct a three-tier security culture, encompassing artefacts, values and shared assumptions.Insider Threat details the measures that organisations can implement to ensure high-impact quick wins, mapping appropriate security controls from the ISO 27001, ISO 27002, and NIST SP 800-53 standards to the following points, and more:Risk mitigation and the eight steps of a risk assessmentThe importance of training and awareness, and conducting staff background screeningMonitoring and auditing the activities of general and privileged users, and quickly responding to suspicious behavioursMetrics to measure insider threat behaviour and mitigationThe challenge of external or temporary insiders (such as consultants, support contractors, partners, service providers, temporary employees)Layering physical and digital defences to provide defence in depthThe importance of conducting regular penetration testing to evaluate security controlsLimiting, monitoring and controlling remote access and mobile device useEnsuring supply-chain securityMaintaining an incident management capabilityIt also sets out what not to do, listing a set of worst practices that should be avoided.The insider threat comes in many forms. Insider Threat is the most in-depth guide to help you prepare for them. Order your copy today.About the authorDr Julie Mehan is the founder and president of JEMStone Strategies and a principal in a strategic consulting firm in Virginia. She has delivered cyber security and related privacy services to senior commercial, Department of Defense and federal government clients working in Italy, Australia, Canada, Belgium and the United States. Dr Mehan is also an associate professor at the University of Maryland University College, specialising in courses in cybersecurity, cyberterror, IT in organisations, and ethics in an Internet society.

Codice articolo 9781849288392

Dati bibliografici

• Titolo: Insider Threat : A Guide to Understanding, Detecting, and Defending Against the Enemy from Within
• Editore: ITGP
• Data di pubblicazione: 2016
• Lingua: Inglese
• ISBN 10: 1849288399
• ISBN 13: 9781849288392
• Rilegatura: Taschenbuch
• Condizione: Neu
• Dimensioni: 216 L x 140 A x 18 P (millimetri) 216 millimetri di larghezza per 140 millimetri di altezza per 18 millimetri di profondità
• Peso: 397 grammi

Descrizione articolo

Riassunto

Every type of organisation is vulnerable to insider abuse, errors, and malicious attacks: grant anyone access to a system and you automatically introduce a vulnerability. Insiders can be current or former employees, contractors, or other business partners who have been granted authorised access to networks, systems, or data, and all of them can bypass security measures through legitimate means.

Insider Threat – A Guide to Understanding, Detecting, and Defending Against the Enemy from Within shows how a security culture based on international best practice can help mitigate the insider threat, providing short-term quick fixes and long-term solutions that can be applied as part of an effective insider threat program.

Read this book to learn the seven organisational characteristics common to insider threat victims; the ten stages of a malicious attack; the ten steps of a successful insider threat program; and the construction of a three-tier security culture, encompassing artefacts, values, and shared assumptions. Perhaps most importantly, it also sets out what not to do, listing a set of worst practices that should be avoided.

Informazioni sull'autore

Dr Julie Mehan is the founder and president of JEMStone Strategies and a principal in a strategic consulting firm in Virginia. She has delivered cyber security and related privacy services to senior commercial, Department of Defense and federal government clients working in Italy, Australia, Canada, Belgium and the United States. Dr Mehan is also an associate professor at the University of Maryland University College, specialising in courses in cybersecurity, cyberterror, IT in organisations, and ethics in an Internet society.