Building an Effective Security Program

FOREWORD - 1 page ABOUT THE AUTHORS - 1 page ACKNOWLEDGMENTS - 1 page INTRODUCTION - 2 pages - What is this book about?
- Who should read this book?
- Why did the authors write this book?
- Organization of the book
CHAPTERS - Chapter 1-Business Case (~15 pages)
This chapter presents the business case for setting up an enduring IT security awareness and training program for use in training the employees of the company-from IT users to career IT security professionals. This chapter introduces fundamental concepts and terms used throughout the book. - Chapter 2-IT Security Mind Set (~15 pages)
This chapter presents thinking like an IT security professional to establish and maintain common security protections. - Chapter 3-IT Security Risk Management (~15 pages)
This chapter presents a risk management process that involves asset management, security vulnerabilities, security threats, risk identification, risk mitigation, and security controls. - Chapter 4-IT Security Process (~15 pages)
This chapter presents how to establish security scopes and select corresponding controls to protect the confidentiality, availability, and integrity of company information. - Chapter 5-IT Security Scenarios and Perspectives (~40 pages)
This chapter presents how the Chapter 4 IT security process is applied to various scenarios. Each scenario will walk through a number of common security controls and apply the IT security process to identify how to protect company information. - IT security at home
- IT security while traveling
- IT security at work
- IT security as an executive
- International IT security
- Chapter 6-Planning IT Security Awareness and Training (~15 pages)
This chapter presents practical guidance on how to write an IT Awareness and Training implementation plan. - Chapter 7-Implementing IT Security Awareness and Training Program(~15 pages)
This chapter presents human issues related to bringing about enterprise-wide cultural change due to implementation of an IT Awareness and Training Program. - Chapter 8-Measuring IT Security Awareness and Training Program Implementation (~15 pages)
This chapter presents practical guidance for measuring program implementation success and how to use the measurements to achieve awareness and training goals. - Chapter 9-Managing Continual Program Improvement (~15 pages)
This chapter presents practical guidance for monitoring compliance, evaluating feedback and improving the program. - Chapter 10-Looking to the Future (~15 pages)
This chapter presents a view of the evolving cybersecurity attacks as they become more capable and sophisticated. APPENDICES - 10 pages GLOSSARY - 3 pages BIBLIOGRAPHY - 3 pages INDEX - 4 pages