
The Cybersecurity Control Playbook
Description
Alles über E-Books | Antworten auf Fragen rund um E-Books, Kopierschutz und Dateiformate finden Sie in unserem Info- & Hilfebereich.
Implement effective cybersecurity measures for all organizations
Cybersecurity is one of the central concerns of our digital age. In an increasingly connected world, protecting sensitive data, maintaining system integrity, and ensuring privacy have never been more important. The Cybersecurity Control Playbook offers a step-by-step guide for implementing cybersecurity controls that will protect businesses and prepare them to compete in an overwhelmingly networked landscape. With balanced coverage of both foundational and advanced topics, and concrete examples throughout, this is a must-own resource for professionals looking to keep their businesses safe and secure.
Readers will also find:
- Clear, jargon-free language that makes it accessible to a wide range of readers
- An introduction to developing, deploying, monitoring, testing, and retiring controls and control frameworks across large, medium, and small enterprises
- A system for identifying, prioritizing, and managing cyber risks based on the MITRE ATT&CK framework, with additional coverage of other key cybersecurity frameworks
The Cybersecurity Control Playbook is ideal for cybersecurity practitioners, IT professionals, and security managers who are responsible for implementing and managing cybersecurity strategies in their organizations.
More details
Other editions
Additional editions

Person
Jason Edwards, DM, CISSP, is an accomplished cybersecurity leader with extensive experience in the technology, finance, insurance, and energy sectors. Holding a Doctorate in Management, Information Systems, and Technology, Jason specializes in guiding large public and private companies through complex cybersecurity challenges. His career includes leadership roles across the military, insurance, finance, energy, and technology industries. He is a husband, father, former military cyber officer, adjunct professor, avid reader, dog dad, and popular on LinkedIn.
Content
Preface xxv
Acknowledgments xxvii
1 Understanding Cybersecurity Controls 1
2 The Risk-Based Approach 17
3 Small Business Implementation 35
4 Medium-Sized Enterprises 55
5 Large Enterprises 73
6 Introduction to MITRE ATT&CK & DEFEND 97
7 Mapping Threats to Controls Using MITRE ATT&CK 117
8 Enhancing Defenses with MITRE DEFEND 141
9 Cybersecurity Frameworks Overview 169
10 Nist 800-53 191
11 Center for Internet Security (CIS) 18 Controls 221
12 Agile Implementation of Controls and Control Frameworks 253
13 Adaptive Control Testing & Continuous Improvement 267
14 Testing Controls in Small and Medium Enterprises 297
15 Control Testing in Larger and Complex Enterprises 317
16 Control Failures: Identification, Management, and Reporting 365
17 Control Testing for Regulated Companies 389
18 Emerging Threats and Technologies 409
Appendix A Glossary of Terms 427
Appendix B Creating and Using a Cybersecurity Risk Register 431
Appendix C Creating and Using a Cybersecurity Risk Taxonomy 437
Appendix D SME Security Team Structures 441
Appendix E Developing Process Maps 445
Appendix F Establishing a Regulatory Change Management Program 449
Appendix G Recommended Metrics for MITRE ATT&CK Techniques 453
Answers 467
Index 503
1
Understanding Cybersecurity Controls
In today's digital battlefield, where cyber threats are as persistent as a drumbeat, understanding cybersecurity controls is imperative for any organization aiming to protect its assets. Cybersecurity controls are technical safeguards and comprehensive strategies encompassing policies, procedures, technologies, and physical measures designed to shield information systems from harm. They ensure that data confidentiality, integrity, and availability-the lifeblood of modern enterprises-are maintained against an ever-evolving array of risks.
We'll start by defining the essence of cybersecurity controls and highlighting their importance in safeguarding technology and the business operations that rely on it. By linking controls to business continuity, compliance requirements, and risk mitigation, we'll illustrate how they are integral to organizational success. This foundational understanding sets the stage for exploring the various types of controls, categorized by timing-preventive, detective, and corrective-and by nature-administrative, technical, and physical.
We'll also explore the control lifecycle, from its identification and selection based on risk assessments and organizational needs through its design, implementation, maintenance, and eventual decommissioning or replacement. Understanding this lifecycle is crucial, as controls are not set-it-and-forget-it solutions. They require continuous attention and adaptation to remain effective in emerging threats and changing technologies.
Leadership insight is another critical component we'll address. Guiding teams to understand and value controls requires more than issuing directives; it demands building awareness, cultivating a culture where security is everyone's responsibility, aligning controls with organizational goals, and fostering an environment of continuous improvement. We'll provide actionable recommendations for leaders to effectively communicate the importance of controls, engage their teams, and drive organizational change that embeds cybersecurity into daily operations.
Definition and Importance
Cybersecurity controls comprise a comprehensive set of processes, policies, tools, and techniques to safeguard information systems, data, and digital infrastructure from risks and malicious activities. By implementing these controls, organizations aim to ensure their digital assets' Confidentiality, Integrity, and Availability-collectively known as the CIA triad. In today's interconnected world, where cyber threats are as pervasive as the air we breathe, understanding and deploying these controls is beneficial and essential.
At their essence, cybersecurity controls serve as the defensive mechanisms that prevent unauthorized access, misuse, alteration, or disruption of computer networks and resources. They act as digital sentinels, guarding against intruders who seek to exploit vulnerabilities for nefarious purposes, such as stealing sensitive data or disrupting services. These controls can be categorized into preventive, detective, and corrective measures, each playing a distinct role in the security ecosystem. Preventive controls aim to stop incidents before they occur by strengthening defenses, such as through firewalls and encryption. Detective controls identify and alert to incidents as they happen, utilizing intrusion detection systems (IDS) and continuous monitoring. Corrective controls focus on restoring systems to normal after an incident, including actions like patch management and incident response procedures. Together, they form a layered defense strategy that addresses threats at every stage, creating a robust, resilient security posture against attacks.
Implementing cybersecurity controls is not a one-size-fits-all endeavor; it requires a strategic approach tailored to the organization's unique characteristics. Each organization must assess its specific operational needs, risk profile, and regulatory environment to determine the most appropriate controls. This customization ensures that the controls effectively mitigate risks and efficiently allocate resources. It's akin to fitting a suit. At the same time, off-the-rack might suffice in a pinch; a tailored fit provides unparalleled comfort and confidence. Companies can build a security framework that supports business operations by conducting thorough risk assessments and aligning controls with organizational objectives and culture. This alignment also helps prioritize resources in the most critical areas, ensuring that security investments yield maximum benefits.
The importance of cybersecurity controls extends far beyond merely keeping unauthorized users at bay; they are fundamental to preserving the organization's integrity and trustworthiness. They are instrumental in preventing data breaches that can have devastating consequences if sensitive information is compromised. Such incidents can lead to significant financial losses from immediate remediation costs and long-term damages like lost revenue due to a tarnished reputation. For example, high-profile data breaches have led to stock prices plummeting and customers abandoning brands they no longer trust. Customers and partners may lose faith in an organization that fails to protect their information, leading to declining business opportunities and market share. In essence, robust cybersecurity controls invest in an organization's future sustainability and success, safeguarding its position in the market and its relationships with stakeholders.
Legal and regulatory compliance is another compelling reason organizations prioritize cybersecurity controls. Many laws and regulations mandate strict adherence to data protection and privacy standards, and failure to comply can have severe repercussions. For instance, the General Data Protection Regulation (GDPR) in the European Union imposes hefty fines-up to 4% of annual global turnover-on organizations that fail to protect personal data adequately. Similarly, industries like healthcare and finance are subject to regulations such as the Health Insurance Portability and Accountability Act (HIPAA) and the Payment Card Industry Data Security Standard (PCI DSS), which require stringent security measures to protect sensitive information. Non-compliance can result in legal actions, financial penalties, and loss of licenses, potentially crippling an organization's operations. In some cases, executives can even face personal liability, including fines and imprisonment, for egregious violations.
Cybersecurity controls also play a pivotal role in ensuring business continuity, which is vital for maintaining operational resilience. Maintaining uninterrupted services is paramount in an era where operational downtime translates directly into financial loss. Cyber attacks like ransomware can bring business operations to a grinding halt, causing significant disruptions. Controls such as redundancy systems, disaster recovery plans, and regular data backups enable organizations to withstand and quickly recover from cyber incidents. They provide a safety net that minimizes operational disruptions and helps maintain customer confidence during crises. After all, the show must go on, even when the stage is under attack. By preparing for the worst, organizations can ensure that they are not caught off-guard and can continue to serve their customers even in adverse situations.
An often-overlooked benefit is how cybersecurity controls contribute to fostering a security-conscious culture within the organization. When employees are educated about security policies and understand the importance of compliance, they become active participants in the organization's defense strategy. Training programs, clear communication of policies, and regular awareness campaigns empower staff to recognize and report potential threats, such as phishing attempts or suspicious activities. This collective vigilance reduces the likelihood of human error-a leading cause of security breaches-and strengthens the organization's overall security posture. By involving everyone in the security process, organizations create a united front against cyber threats, turning what could be a weak link into a strong line of defense.
Complacency is a luxury no organization can afford in the ever-evolving landscape of cyber threats. Cybersecurity controls must be dynamic, adapting to new vulnerabilities and threat vectors that emerge with alarming frequency. Cybercriminals constantly develop new attack methods, exploiting emerging technologies like artificial intelligence and machine learning to enhance their capabilities. Regular assessments, updates, and improvements to the security framework are necessary to stay one step ahead of these adversaries. This includes patching software vulnerabilities, updating security protocols, and staying informed about the latest threat intelligence. It's a continuous game of cat and mouse, where yesterday's defenses may not thwart today's sophisticated attacks. Therefore, a proactive approach to updating and refining controls is essential for long-term security, ensuring that defenses evolve alongside threats.
Understanding and effectively implementing cybersecurity controls is not just the IT department's responsibility but the entire organization's, from the boardroom to the break room. Leadership must champion security initiatives, allocate appropriate resources, and foster an environment where security...
System requirements
File format: ePUB
Copy protection: Adobe-DRM (Digital Rights Management)
System requirements:
- Computer (Windows; MacOS X; Linux): Install the free reader Adobe Digital Editions prior to download (see eBook Help).
- Tablet/smartphone (Android; iOS): Install the free app Adobe Digital Editions or the app PocketBook before downloading (see eBook Help).
- E-reader: Bookeen, Kobo, Pocketbook, Sony, Tolino and many more (not Kindle).
The file format ePub works well for novels and non-fiction books – i.e., „flowing” text without complex layout. On an e-reader or smartphone, line and page breaks automatically adjust to fit the small displays.
This eBook uses Adobe-DRM, a „hard” copy protection. If the necessary requirements are not met, unfortunately you will not be able to open the eBook. You will therefore need to prepare your reading hardware before downloading.
Please note: We strongly recommend that you authorise using your personal Adobe ID after installation of any reading software.
For more information, see our ebook Help page.