Enterprise Cybersecurity

Enterprise Cybersecurity empowers organizations of all sizes to defend themselves with next-generation cybersecurity programs against the escalating threat of modern targeted cyberattacks. This book presents a comprehensive framework for managing all aspects of an enterprise cybersecurity program. It enables an enterprise to architect, design, implement, and operate a coherent cybersecurity program that is seamlessly coordinated with policy, programmatics, IT life cycle, and assessment.

Fail-safe cyberdefense is a pipe dream. Given sufficient time, an intelligent attacker can eventually defeat defensive measures protecting an enterprise’s computer systems and IT networks.

To prevail, an enterprise cybersecurity program must manage risk by detecting attacks early enough and delaying them long enough that the defenders have time to respond effectively. Enterprise Cybersecurity shows players at all levels of responsibility how to unify their organization’s people, budgets, technologies, and processes into a cost-efficient cybersecurity program capable of countering advanced cyberattacks and containing damage in the event of a breach.

The authors of Enterprise Cybersecurity explain at both strategic and tactical levels how to accomplish the mission of leading, designing, deploying, operating, managing, and supporting cybersecurity capabilities in an enterprise environment. The authors are recognized experts and thought leaders in this rapidly evolving field, drawing on decades of collective experience in cybersecurity and IT. In capacities ranging from executive strategist to systems architect to cybercombatant, Scott E. Donaldson, Stanley G. Siegel, Chris K. Williams, and Abdul Aslam have fought on the front lines of cybersecurity against advanced persistent threats to government, military, and business entities.

Part I: The Cybersecurity Challenge

Chapter 1: Defining the Cybersecurity Challenge

Chapter 2: Meeting the Cybersecurity Challenge

Part II: A New Enterprise Cybersecurity Architecture

Chapter 3: Enterprise Cybersecurity Architecture

Chapter 4: Implementing Enterprise Cybersecurity

Chapter 5: Operating Enterprise Cybersecurity

Chapter 6: Enterprise Cybersecurity and the Cloud

Chapter 7: Enterprise Cybersecurity for Mobile and BYOD

Part III: The Art of Cyberdefense

Chapter 8: Building an Effective Defense

Chapter 9: Responding to Incidents

Chapter 10: Managing a Cybersecurity Crisis

Part IV: Enterprise Cyberdefense Assessment

Chapter 11: Assessing Enterprise Cybersecurity

Chapter 12: Measuring a Cybersecurity Program

Chapter 13: Mapping Against Cybersecurity Frameworks

Part V: Enterprise Cybersecurity Program

Chapter 14: Managing an Enterprise Cybersecurity Program

Chapter 15: Looking to the Future

Appendices:

Appendix A: Common Cyberattacks

Appendix B: Cybersecurity Frameworks

Appendix D: Sample Cybersecurity Policy

Appendix E: Cybersecurity Operational Processes

Appendix F: Object Measurement

Appendix G: Cybersecurity Capability Value Scales

Appendix H: Cybersecurity Sample Assessment

Appendix I: Network Segmentation

Glossary

Bibliography