Information Security

In The DevSecOps Playbook: Deliver Continuous Security at Speed, the chief information and information security officer at Wiley, Sean D. Mack, delivers an insightful and practical discussion of how to keep your business secure. You'll learn how to leverage the classic triad of people, process, and technology to build strong cybersecurity infrastructure and practices. You'll also discover the shared responsibility model at the core of DevSecOps as you explore the principles and best practices that make up contemporary frameworks.

The Pentester BluePrint: Starting a Career as an Ethical Hacker offers listeners a chance to delve deeply into the world of the ethical, or "white-hat" hacker. Accomplished pentester and author Phillip L. Wylie and cybersecurity researcher Kim Crawley walk you through the basic and advanced topics necessary to understand how to make a career out of finding vulnerabilities in systems, networks, and applications.

We live in a world where information takes on a life of its own and spreads rapidly. Faster than ever before. For some people, their lives depend on obtaining a steady stream of information as it affects their lives in the most telling ways. The daily news is the simplest example of this phenomenon. It is truly the lifeblood of society and helps us evolve into better informed individuals with every passing day. As one can tell, information on the whole comes at us from every direction. Its influence on business, politics, and government, banking, the STEM fields, and even the social ...

Navigating the complex terrain of SOC2 compliance can be a daunting task. "A Step-by-Step Guide to SOC2 Type 1 Attestation and Type 2 Certification" is your trusted companion on this journey, offering a comprehensive, accessible, and practical roadmap to achieving and maintaining SOC2 compliance. Penned by renowned information security expert, Russell D. Nomer, CISSP, this guide leverages over 30 years of experience and delivers invaluable insights in an engaging and reader-friendly manner. From understanding the importance of SOC2 attestation to conducting successful audits and mitigating ...

The Cyber Threat Landscape: A Reference Guide of Infiltration Techniques for Cyber Security Professionals BOOK 1 Reconnaissance and a Few Other Cyber Techniques Unlock the secrets of cyber threats with The Cyber Threat Landscape, the ultimate reference guide designed for cybersecurity professionals. This essential book series delves deep into the tactics and techniques used by adversaries to infiltrate and compromise systems. Book 1: Reconnaissance and a Few Other Cyber Techniques offers a comprehensive exploration of the initial stages of cyber attacks. From active scanning to social ...

Small Wars, Big Data provides groundbreaking perspectives for how small wars can be better strategized and favorably won to the benefit of the local population.

Did you know that getting your CISSP Certification could be one of the best decisions you’d ever make? If you intend to pursue a career in the IT sector, now is the time to take serious action. It is no doubt that CISSP is one of the world’s most valued certification in information security. We cannot overemphasize the relevance of this certification because of the transformation taking place in the information technology sector, especially for cybersecurity companies who employ sophisticated security measures against digital and cyber theft or manipulation. Even with over a 25 year ...

Written by an acknowledged expert on the ISO/IEC 27001 standard, ISO 27001: 2022–An Introduction to Information Security and the ISMS Standard is an ideal primer for anyone implementing an information security management system aligned to ISO 27001: 2022.

ISO 27001: Internal Audits & Data Protection: Strengthening Compliance & Security A Practical Guide to Conducting Internal Audits and Safeguarding Sensitive Data In the digital age, organizations must ensure the confidentiality, integrity, and availability of their sensitive information. This practical guide helps businesses understand the key concepts of ISO 27001, focusing on conducting internal audits and implementing data protection strategies to strengthen compliance and security. The book provides a step-by-step approach for performing thorough internal audits in alignment with ISO ...

In no other time in recent history have leaders in every industry and on every continent grappled with so many changes that have independently and simultaneously undermined their ability to lead. The Prepared Leader encapsulates more than two decades of the authors' research to convey how it has positioned them to navigate through the distinct challenges of today and tomorrow. Their insights have implications for every leader in every industry and every worker at every level.

ISO 27001:2022 Explained – A Comprehensive Clause-by-Clause Guide Achieving ISO 27001:2022 compliance is essential for protecting your organization’s sensitive information and ensuring data security. This comprehensive guide takes you through the entire ISO 27001 framework with step-by-step instructions, real-world examples, and practical tools to help you build and maintain a robust Information Security Management System (ISMS).What’s Inside: Clause-by-Clause Breakdown: Each chapter offers a clear explanation of every ISO 27001 clause and how to implement it effectively. From Context...

Elevate your organization's information security to new heights with "Mastering ISO 27001:2022 — A Comprehensive Guide to Information Security Management." This simplified guide is tailored for business leaders seeking success with ISO 27001, offering practical strategies to implement robust information security practices. Comprehensive Coverage: Delve into ISO 27001:2022 and gain a comprehensive understanding of information security management systems (ISMS). Explore key concepts from risk assessment to control implementation, ensuring thorough compliance with ISO standards. Cutting-Edge...

Hardening AWS" is a comprehensive guidebook that provides AWS customers with practical advice and best practices for securing their cloud infrastructure. The book covers various topics related to AWS security, including identity and access management, network security, instance security, data security, application security, incident response, disaster recovery, compliance, and governance.

Here are proven methods for building an online income stream. Maybe you dream of making money with an online business, but haven’t tried so far because you’d have to quit your current job and enter the risky world of Internet startups. Or because you think you need lots of capital and way too much time. If these reasons sound familiar, Dave Lindahl and Jon Rozek beg to differ.

Released by the Freedom of Information Act. This document is a thorough description of how the CIA recommends interrogating a subject. To get the information that is needed there is nothing withheld short of torture. For example in "Threats and Fears," the CIA authors note that "the threat of coercion usually weakens or destroys resistance more effectively than coercion itself. The threat to inflict pain, for example, can trigger fears more damaging than the immediate sensation of pain."

ISO 27001:2022 Risk Assessment & Treatment Methodology: A Comprehensive Guide Achieving ISO 27001:2022 compliance is crucial for organizations aiming to strengthen their information security posture. This guide offers a step-by-step methodology for risk assessment and treatment, detailing everything from identifying critical assets and assessing cyber threats to creating risk treatment strategies. It includes real-world examples, case studies, and a focus on continuous monitoring, ensuring that businesses can address risks, meet regulatory standards, and prepare for ISO 27001 certification....

Artificial Intelligence (AI) is a rapidly growing field that encompasses a wide range of technologies, algorithms, and applications. AI involves the creation of intelligent machines that can perform tasks that typically require human intelligence, such as recognizing speech, making decisions, and solving complex problems. AI is used in various applications, such as image and speech recognition, natural language processing, robotics, and autonomous vehicles. In this chapter, we explore the history, technologies, applications, and challenges of AI.

In "The CISO's guide to Surviving Machiavellian Politics", Russell D. Nomer, CISSP draws upon the combination of academic lessons and his own unique experiences and observations to share lessons learned from: Over three decades of technology and security consulting spanning multiple industries Studying Political Communications, Political Science and Politics & Values at The George Washington University Completing Morton Blackwell Leadership Institute Training Obtaining a Bachelor of Science Degree with honors in Security Systems from SUNY Farmingdale Obtaining a CISSP Obtaining ITIL ...

ISO 27001: Compliance in Action Transforming Policies into Practical, Lasting Security Solutions In today's world, where data breaches and cyber threats are on the rise, ISO 27001: Compliance in Action is your ultimate hands-on guide to implementing, monitoring, and sustaining an effective Information Security Management System (ISMS). This book bridges the gap between policy creation and practical application, providing step-by-step strategies to help organizations build lasting security solutions. What You'll Learn: ✔️ Comprehensive Implementation: Turn ISO 27001 requirements into ...

Hacking APIs - A Comprehensive Guide from Beginner to Intermediate is a comprehensive guide that provides readers with a detailed understanding of APIs and their usage in modern web applications. The book is designed for beginners who are interested in learning about API hacking and for intermediate-level readers who want to improve their knowledge and skills in this area. The book is divided into eight chapters, covering everything from the basics of APIs and web services to advanced API hacking techniques. Chapter 1 provides an introduction to APIs and web services, explaining what APIs ...