Название: The Cybersecurity Guide to Governance, Risk, and Compliance
Автор: Jason Edwards, Griffin Weaver
Издательство: Wiley
Год: 2024
Страниц: 667
Язык: английский
Формат: pdf (true), azw3
Размер: 10.1 MB

Understand and respond to a new generation of cybersecurity threats.

Cybersecurity has never been a more significant concern of modern businesses, with security breaches and confidential data exposure as potentially existential risks. Managing these risks and maintaining compliance with agreed-upon cybersecurity policies is the focus of Cybersecurity Governance and Risk Management. This field is becoming ever more critical as a result. A wide variety of different roles and categories of business professionals have an urgent need for fluency in the language of cybersecurity risk management.

The Cybersecurity Guide to Governance, Risk, and Compliance meets this need with a comprehensive but accessible resource for professionals in every business area. Filled with cutting-edge analysis of the advanced technologies revolutionizing cybersecurity, increasing key risk factors at the same time, and offering practical strategies for implementing cybersecurity measures, it is a must-own for CISOs, boards of directors, tech professionals, business leaders, regulators, entrepreneurs, researchers, and more.

Cybersecurity auditing is pivotal for establishing secure information technology practices in the digital age. It encompasses a range of important topics that are critical for both auditors and those being audited. This includes understanding the shifting role of auditors in the contemporary digital environment, grasping essential cybersecurity concepts, and delving into the specifics of audit charters and engagements. In addition, risk-­based auditing represents a significant aspect of this landscape, highlighting the need to focus on areas with the highest potential risk in cybersecurity.

The Cybersecurity Guide to Governance, Risk, and Compliance also covers
• Over 1300 actionable recommendations found after each section
• Detailed discussion of topics including AI, cloud, and quantum computing
• More than 70 ready-to-use KPIs and KRIs

Target Audience:
The subject of cybersecurity touches a wide range of professionals. One of the key strengths of this book is its cross- industry applicability, which means it can benefit a diverse audience. This guide targets cybersecurity professionals, from those beginning their careers to seasoned experts. It provides foundational knowledge and in- depth insights into cybersecurity governance, risk, and compliance.

Compliance officers are another primary audience for this book. These professionals ensure that their organizations adhere to the necessary regulations and standards. Compliance officers can more effectively align their practices with the organization’s cyber risk management efforts with a clear understanding of cybersecurity principles.

IT professionals can gain substantial value from this guide, whether directly involved in cybersecurity or not. Cybersecurity is not a stand- alone function; it is deeply interwoven with other IT practices. Therefore, understanding cybersecurity principles can aid IT professionals in designing, implementing, and maintaining systems and networks that are resilient against cyber threats.