<DIV sercontent>  <P style="MARGIN: 0px">This book is a complete guide to establishing a cybersecurity program and governance in your organization. In this book, studentswill learn how to create cybersecurity policies, standards, procedures, guidelines, and plans &mdash; and the differences among them. This book covers the Confidentiality, Integrity &amp; Availability (CIA) security model. Students will also learn how threat actors are launching attacks against their victims compromising confidentiality, integrity, and availability of systems and networks. This book covers the NIST Cybersecurity Framework and ISO/IEC 27000-series standards. Readers will learn how to align security with business strategy, as well as define, inventory, and classify information and systems.</P>  <P style="MARGIN: 0px">&nbsp;</P>  <P style="MARGIN: 0px">This book teaches students how to systematically identify, prioritize, and manage cybersecurity risks and reduce social engineering (human) risks with role-based Security Education, Awareness, and Training (SETA). They will also learn how to implement effective physical, environmental, communications, and operational security; and effectively manage access control. In this book students will learn how to respond to incidents and ensure continuity of operations and how to comply with laws and regulations, including GLBA, HIPAA/HITECH, FISMA, state data security and notification rules, and PCI DSS.</P></DIV>

<ul>
    <li>Chapter 1. Understanding Cybersecurity Policy and Governance </li>
    <li>Chapter 2. Cybersecurity Policy Organization, Format and Styles </li>
    <li>Chapter 3. Cybersecurity Framework </li>
    <li>Chapter 4. Governance and Risk Management </li>
    <li>Chapter 5. Asset Management and Data Loss Prevention </li>
    <li>Chapter 6. Human Resources Security </li>
    <li>Chapter 7. Physical and Environmental Security </li>
    <li>Chapter 8. Communications and Operations Security </li>
    <li>Chapter 9. Access Control Management </li>
    <li>Chapter 10. Information Systems Acquisition, Development, and Maintenance </li>
    <li>Chapter 11. Cybersecurity Incident Response </li>
    <li>Chapter 12. Business Continuity Management </li>
    <li>Chapter 13. Regulatory Compliance for Financial Institutions</li>
    <li>Chapter 14. Regulatory Compliance for the Healthcare Sector </li>
    <li>Chapter 15. PCI Compliance for Merchants </li>
    <li>Appendix A. Information Security Program Resources </li>
    <li>Appendix B. Sample Information Security Policy </li>
    <li>Appendix C. Information Systems Acceptable Use Agreement and Policy</li>
</ul>

<ul>
    <li>Chapter 1. Understanding Cybersecurity Policy and Governance </li>
    <li>Chapter 2. Cybersecurity Policy Organization, Format and Styles </li>
    <li>Chapter 3. Cybersecurity Framework </li>
    <li>Chapter 4. Governance and Risk Management </li>
    <li>Chapter 5. Asset Management and Data Loss Prevention </li>
    <li>Chapter 6. Human Resources Security </li>
    <li>Chapter 7. Physical and Environmental Security </li>
    <li>Chapter 8. Communications and Operations Security </li>
    <li>Chapter 9. Access Control Management </li>
    <li>Chapter 10. Information Systems Acquisition, Development, and Maintenance </li>
    <li>Chapter 11. Cybersecurity Incident Response </li>
    <li>Chapter 12. Business Continuity Management </li>
    <li>Chapter 13. Regulatory Compliance for Financial Institutions </li>
    <li>Chapter 14. Regulatory Compliance for the Healthcare Sector </li>
    <li>Chapter 15. PCI Compliance for Merchants </li>
    <li>Appendix A. Information Security Program Resources </li>
    <li>Appendix B. Sample Information Security Policy </li>
    <li>Appendix C. Information Systems Acceptable Use Agreement and Policy </li>
</ul>

Omar Santos

Developing Cybersecurity Programs and Policies

A digital version of the text you can personalize and read online or offline.

eTextbook

A digital version of the text you can personalize and read online or offline. If your instructor has invited you to join a specific Pearson eTextbook course for your class, you will need to purchase your eText through the course invite link they provide.

Now available on

This product is expected to ship within 3-6 business days for US and 5-10 business days for Canadian customers.

This product is a bound, printed text book.

Print

Paperback

Developing Cybersecurity Programs and Policies, 3rd edition

Access details

Features

Pearson+