Information Security Handbook PDF
Preview Information Security Handbook
Information Security Handbook Develop a threat model and incident response strategy to build a strong information security framework Darren Death BIRMINGHAM - MUMBAI Information Security Handbook Copyright © 2017 Packt Publishing All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews. Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the author, nor Packt Publishing, and its dealers and distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book. Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information. First published: December 2017 Production reference: 1071217 Published by Packt Publishing Ltd. Livery Place 35 Livery Street Birmingham B3 2PB, UK. ISBN 978-1-78847-883-0 www.packtpub.com Credits Author Copy Editor Darren Death Safis Editing Reviewers Project Coordinator Abhinav Rai Judie Jose Heath Renfrow Commissioning Editor Proofreader Gebin George Safis Editing Acquisition Editor Indexer Heramb Bhavsar Pratik Shirodkar Content Development Editor Graphics Abhishek Jadhav Tania Dutta Technical Editor Production Coordinator Mohd Riyan Khan Aparna Bhagat About the Author Darren Death is an information security professional living in the DC Metropolitan Area. During his 17-year technology career, he has supported the private and public sector at the local, state, and national levels. Darren has worked for organizations such as the Department of Justice, Library of Congress, and the Federal Emergency Management Agency. Darren currently works for Artic Slope Regional Corporation as its chief information security officer. In this role, Darren is responsible for the ASRC Enterprise Information Security program, where he manages the Information Security program across the 3 billion dollar ASRC portfolio crossing many business sectors to include energy, financial services, hospitality, retail, construction, and federal government contracting. Darren is very active in the information security community and can be heard at many conferences throughout the year speaking on many of the topics covered in this book. Infragard is an organization that is dedicated to sharing information and intelligence working to prevent hostile acts against the United States. In this role, he teaches students the building blocks that go into establishing a successful information security program. I would like to thank my amazing wife and children for putting up with me and sacrificing the time that it took to write this book. I would also like to thank the many executives that have walked alongside me throughout my career. These executives include: Leif Henecke, CIO at ASRC Federal; Ann-Marie Massenberg, Chief of Staff at the Office of Financial Management at the US Department of Transportation; Jonathan Alboum, CIO at USDA; Steve Elky, Director of IT Strategic Planning at the Library of Congress; Douglas Ament, CIO at the US Copyright Office; Kyle Holtzman, Deputy Assistant Director of Service Portfolio Management at the U.S. Department of Justice; and Oscar Jordan, Master Sergeant United States Air Force. Without learning the valuable lessons that I learned from these professionals, I would not be where I am today. It is also because of these individuals that I strongly support and participate in mentoring opportunities for others who are staring in their IT careers and work to teach and spread what I have learned to others regarding IT and Information Security best practices. About the Reviewers Abhinav Rai has been associated with information security professional and has experience in web application security, network security, mobile application security, web services security, source code review, and configuration audit. He is currently working as an information security professional. He has completed his degree in computer science and his postgraduate diploma in IT infrastructure, systems and security. He also holds a certificate in communication protocol design and testing. He can be reached at . [email protected] Mr. Heath Renfrow has served the Chief Information Security Officer for multiple global organizations, and most recently as the CISO for United States Army Medicine, where he was awarded the 2017 Global CISO of the year by EC-COUNCIL, the largest cyber training body in the world. Mr. Renfrow has 20 years of global cyber security professional experience, and is considered one of the leading cyber experts today. He holds Bachelors in Science in Information Technology, and a Master’s of Science in Cyber Studies. Mr. Renfrow also holds numerous industry leading certifications, including Certified Chief Information Security Officer (C|CISO), Certified Information Systems Security Professional (CISSP), and Certified Ethical Hacker (C|EH). All praise to my Lord and Savior, and as always a thank you to my loving and supportive wife, Kathy, as I would be nothing without both! www.PacktPub.com For support files and downloads related to your book, please visit . www.PacktPub.com Did you know that Packt offers eBook versions of every book published, with PDF and ePub files available? You can upgrade to the eBook version at and as a print book customer, you are www.PacktPub.com entitled to a discount on the eBook copy. Get in touch with us at for more details. [email protected] At , you can also read a collection of free technical articles, sign up for a range of free www.PacktPub.com newsletters and receive exclusive discounts and offers on Packt books and eBooks. https://www.packtpub.com/mapt Get the most in-demand software skills with Mapt. Mapt gives you full access to all Packt books and video courses, as well as industry-leading tools to help you plan your personal development and advance your career. Why subscribe? Fully searchable across every book published by Packt Copy and paste, print, and bookmark content On demand and accessible via a web browser Customer Feedback Thanks for purchasing this Packt book. At Packt, quality is at the heart of our editorial process. To help us improve, please leave us an honest review of this book's Amazon page at https://www.amazon.com/dp/17884 . 78835/ If you'd like to join our team of regular reviewers, you can e-mail us at . We [email protected] award our regular reviewers with free eBooks and videos in exchange for their valuable feedback. Help us be relentless in improving our products!
The list of books you might like
