Information Security

Are you ready to revolutionize your organization’s approach to cybersecurity and learn GRC? In a world where threats evolve faster than ever, achieving robust Governance, Risk Management, and Compliance (GRC) is no longer optional—it’s essential. Yet, countless organizations struggle to bridge the gap between lofty compliance standards and practical implementation. Imagine having a proven roadmap that transforms the complexities of cybersecurity frameworks into a clear, actionable plan tailored to your organization’s unique needs while giving you a practical understanding of GRC. ...

Dive into the world of ethical hacking and cybersecurity with Shimon Brathwaite's enlightening guide, "How to Make a Living Hacking Computers." This book demystifies the path to becoming a professional hacker - not one who breaks into systems with malicious intent, but a skilled expert who is hired to find vulnerabilities and strengthen the security of digital infrastructures. Brathwaite, with his extensive experience in the field, offers a comprehensive look into the various aspects of ethical hacking. Whether you're a complete novice curious about the field or a tech enthusiast looking to...

Cybersecurity Standards and Frameworks: A Comprehensive Guide to Resilient Cyber Defense In today's digital landscape, cyber threats are increasing in frequency and sophistication, putting organizations at risk of data breaches, operational disruptions, and reputational damage. To combat these evolving risks, industry-recognized cybersecurity standards and frameworks have emerged as essential tools for establishing robust security practices and fostering a culture of cyber resilience. This comprehensive guide provides an in-depth exploration of the most widely adopted cybersecurity ...

This book analyzes the evolution of Russian military thought and how Russia's current thinking about war is reflected in recent crises. What Jonsson reveals is that Russia's conception of the very nature of war is now changing, as Russian elites see information warfare and political subversion as the most important ways to conduct contemporary war. Since information warfare and political subversion are below the traditional threshold of armed violence, this has blurred the boundaries between war and peace.

As information security professionals, risk evaluation and mitigation are the key parts of our job. Dealing with risk is the theme of our roles, be it as firewall engineers, auditors, penetration testers, management, etc. The key functions of the Security and Risk Management domain are risk analysis and mitigation as well as ensuring the best organizational structure for a robust information security system is in place. In this area of expertise, it’s the quality of the people that can make or break an organization. By “quality of the people”, we mean knowledgeable and experienced ...

The NIST Cybersecurity Framework, intelligently designed to synchronize with top-tier industry practices, is a treasure trove for all cybersecurity enthusiasts, IT professionals, or organizational leaders determined to enhance their information systems security. This book, with its ability to translate complex concepts into accessible lessons, has the power to elevate beginners into adept cybersecurity practitioners.

Every organization today faces an ever-changing set of threats in this digital landscape. Understanding how to develop a functional information security program to protect your organization’s reputation and brand from being tarnished due to a breach of your company’s sensitive information is more critical than ever. Developing a functional program that sets up the best information security practices across the organization’s operational workflows, is the leading practice for protecting against a possible breach.

We live in the age of disinformation - of organized deception. Spy agencies pour vast resources into hacking, leaking, and forging data, often with the goal of weakening the very foundation of liberal democracy: trust in facts. Thomas Rid, a renowned expert on technology and national security, was one of the first to sound the alarm, even before the 2016 election. But this is not new. The story of modern disinformation begins with the clash between communism and capitalism after the Russian Revolution.

In The DevSecOps Playbook: Deliver Continuous Security at Speed, the chief information and information security officer at Wiley, Sean D. Mack, delivers an insightful and practical discussion of how to keep your business secure. You'll learn how to leverage the classic triad of people, process, and technology to build strong cybersecurity infrastructure and practices. You'll also discover the shared responsibility model at the core of DevSecOps as you explore the principles and best practices that make up contemporary frameworks.

Unlock the secrets to mastering the NIST 800 risk management process in record time with this powerful 2-in-1 bundle! Introducing Information Systems Security NIST 800 2-in-1, featuring both RMF ISSO Foundation Guide and RMF ISSO: NIST 800-53. This comprehensive series is your ultimate roadmap to success, designed to simplify the complexities of NIST 800-53 security controls and show you the actionable steps required throughout the RMF process.

"Conquer the CISSP Exam: Your Guide to Success as a Certified Information Systems Security Professional" is your comprehensive resource for mastering the Certified Information Systems Security Professional (CISSP) exam. This guide offers a deep dive into each of the eight CISSP domains, providing clear explanations and practical insights to ensure you understand and can apply key concepts. Covering topics such as Security and Risk Management, Asset Security, Security Engineering, Communications and Network Security, Identity and Access Management, Security Assessment and Testing, Security ...

Edward Snowden, the man who risked everything to expose the US government’s system of mass surveillance, reveals for the first time the story of his life, including how he helped to build that system and what motivated him to try to bring it down.

This book is the best recipe for becoming an expert on information security. If you aspire to be a security expert by taking the CISSP exam, there is no shortage of books that claim to be the ultimate solution to information security. They dupe students into thinking that they are the only books on the market for this specific subject. Well, they may be dubbed as the ultimate but are they the most reader-friendly books for this dry subject? Will there be any juice to be consumed by the reader and fiber to digest? Are those books written easy to under language? If those book authors have ...

Hardening AWS" is a comprehensive guidebook that provides AWS customers with practical advice and best practices for securing their cloud infrastructure. The book covers various topics related to AWS security, including identity and access management, network security, instance security, data security, application security, incident response, disaster recovery, compliance, and governance.

Did you know that getting your CISSP Certification could be one of the best decisions you’d ever make? If you intend to pursue a career in the IT sector, now is the time to take serious action. It is no doubt that CISSP is one of the world’s most valued certification in information security. We cannot overemphasize the relevance of this certification because of the transformation taking place in the information technology sector, especially for cybersecurity companies who employ sophisticated security measures against digital and cyber theft or manipulation. Even with over a 25 year ...

Are You Ready to Master the CompTIA Security+ and Elevate Your IT Security Career? In an era where digital threats loom large and cybersecurity skills are in high demand, simply understanding the basics isn’t enough. SysAdmins and IT professionals face a constant challenge: staying ahead of evolving cyber threats while effectively managing complex security protocols. Navigating the intricate landscape of IT security can be overwhelming. Are you equipped to protect sensitive data against sophisticated cyber-attacks? Can you confidently implement and manage robust security systems? Failing ...

The Pentester BluePrint: Starting a Career as an Ethical Hacker offers listeners a chance to delve deeply into the world of the ethical, or "white-hat" hacker. Accomplished pentester and author Phillip L. Wylie and cybersecurity researcher Kim Crawley walk you through the basic and advanced topics necessary to understand how to make a career out of finding vulnerabilities in systems, networks, and applications.

In this updated edition, the authors show you how zero trust lets you focus on building strong authentication, authorization, and encryption throughout, while providing compartmentalized access and better operational agility. You'll learn the architecture of a zero trust network, including how to build one using currently available technology.

Small Wars, Big Data provides groundbreaking perspectives for how small wars can be better strategized and favorably won to the benefit of the local population.

Vol. 3 & 4: Mobile, Metadata, and the Machines Watching You Because it’s not paranoia if they really are listening, tracking, and triangulating your location. Welcome to the part of the fight where things get uncomfortable: mobile spyware, Stingrays disguised as friendly cell towers, rogue QR codes, AI-powered OSINT engines scraping your every move. This volume goes deeper: mobile OS lockdown, open-source tools that don’t betray you, quiet ways to communicate when the rest of the internet is on fire. We hit nodes, ransomware, privilege escalation, and Pegasus. We dissect Onion routing ...