Cyber Security Awareness for CEOs and Management

56 Pages·2015·2.403 MB·English

by  David Willson, Henry Dalziel

Cyber Security Awareness for
CEOs and Management
This pageintentionallyleftblank
Cyber Security Awareness for
CEOs and Management
David Willson
Contributing Editor
Henry Dalziel
AMSTERDAM(cid:129)BOSTON(cid:129)HEIDELBERG(cid:129)LONDON
NEWYORK(cid:129)OXFORD(cid:129)PARIS(cid:129)SANDIEGO
SANFRANCISCO(cid:129)SINGAPORE(cid:129)SYDNEY(cid:129)TOKYO
SyngressisanimprintofElsevier
SyngressisanimprintofElsevier
225WymanStreet,Waltham,MA02451,USA
Copyrightr2016ElsevierInc.Allrightsreserved.
Nopartofthispublicationmaybereproducedortransmittedinanyformorbyanymeans,
electronicormechanical,includingphotocopying,recording,oranyinformationstorageand
retrievalsystem,withoutpermissioninwritingfromthepublisher.Detailsonhowtoseek
permission,furtherinformationaboutthePublisher’spermissionspoliciesandourarrangements
withorganizationssuchastheCopyrightClearanceCenterandtheCopyrightLicensingAgency,
canbefoundatourwebsite:www.elsevier.com/permissions
Thisbookandtheindividualcontributionscontainedinitareprotectedundercopyright
bythePublisher(otherthanasmaybenotedherein).
Notices
Knowledgeandbestpracticeinthisfieldareconstantlychanging.Asnewresearchand
experiencebroadenourunderstanding,changesinresearchmethodsorprofessionalpractices,
maybecomenecessary.
Practitionersandresearchersmustalwaysrelyontheirownexperienceandknowledgein
evaluatingandusinganyinformationormethodsdescribedherein.Inusingsuchinformation
ormethodstheyshouldbemindfuloftheirownsafetyandthesafetyofothers,including
partiesforwhomtheyhaveaprofessionalresponsibility.
Tothefullestextentofthelaw,neitherthePublishernortheauthors,contributors,oreditors,
assumeanyliabilityforanyinjuryand/ordamagetopersonsorpropertyasamatterofproducts
liability,negligenceorotherwise,orfromanyuseoroperationofanymethods,products,
instructions,orideascontainedinthematerialherein.
ISBN:978-0-12-804754-5
BritishLibraryCataloguing-in-PublicationData
AcataloguerecordforthisbookisavailablefromtheBritishLibrary
LibraryofCongressCataloging-in-PublicationData
AcatalogrecordforthisbookisavailablefromtheLibraryofCongress
ForInformationonallSyngresspublications
visitourwebsiteathttp://store.elsevier.com/Syngress
CONTENTS
About the Contributing Editor.............................................................vii
Introduction.........................................................................................ix
Chapter 1 How Bad Is It Out There?....................................................1
Chapter 2 How Is Data Stolen?............................................................9
Chapter 3 Who Are the Hackers?.......................................................25
Chapter 4 How to Protect Your Business?..........................................31
Chapter 5 Ethics.................................................................................37
Chapter 6 Conclusion.........................................................................41
This pageintentionallyleftblank
ABOUT THE CONTRIBUTING EDITOR
Henry Dalziel is a serial education entrepreneur, founder of Concise
Ac Ltd, online cybersecurity blogger, and e-book author. He writes
for the Concise-Courses.com blog and has developed numerous
cybersecurity continuing education courses and books. Concise Ac
Ltd develops and distributes continuing education content (books and
courses) for cybersecurity professionals seeking skill enhancement and
career advancement. The company was recently accepted onto the
UK Trade & Investment’s (UKTI) Global Entrepreneur Programme
(GEP).
This pageintentionallyleftblank
INTRODUCTION
As a CEO, corporate executive or member of management are you
concerned about cyber security, that inevitable data breach, how you
will react, whether you will be sued or fired, and what you can do
about it? This book provides an overview of the cyber threat/risks to
your business and you or your position, and will discuss what you
need to do, especially as CEOs, executives and management, to lower
the risk, reduce or eliminate liability, and protect the reputation of the
company, and yourself, as it relates to information security, data
protection and data breaches.
Here’s a little bit about my background: I grew up in New York.
After attending law school I went on active duty with the U.S. Army.
I spent 20 years in the Army as a JAG officer. During that time I
engaged in a lot of trial work, prosecution and defense work. Halfway
through my career I transitioned into operational and international