Agile Security Operations: Engineering for agility in cyber defense, detection, and response

Agile security operations allow organizations to survive cybersecurity incidents, deliver key insights into the security posture, and operate security as an integral part of development and operations. This book focuses on the culture, staffing, technology, strategy, and tactical aspects of security operations, teaching how to establish and build a team and transform existing teams into ones that can execute agile security operations. It covers key concepts of security, the kill chain, the ATT&CK framework, and the Cynefin framework, as well as designing and developing a defensible security architecture, detection and response engineering, measuring the security posture, and implementing security as part of development and business operations.

Format: Paperback / softback
Length: 254 pages
Publication date: 17 February 2022
Publisher: Packt Publishing Limited

Agile security operations enable organizations to effectively respond to cybersecurity incidents, gain valuable insights into their security posture, and seamlessly integrate security into their development and operations. This approach, rooted in the principles of agility, has proven to be the most effective way to ensure security at its highest level.

Agile Security Operations provides a comprehensive guide for implementing and operating an agile security operations model within an organization. The book delves into the culture, staffing, technology, strategy, and tactical aspects of security operations, empowering readers to establish and nurture a skilled team capable of executing agile security practices.

Throughout the chapters, readers will gain a deep understanding of key security concepts, such as the kill chain, the ATT&CK framework, and the Cynefin framework. They will also learn how to design and develop a robust security architecture that can withstand evolving threats.

One of the key advantages of agile security operations is its ability to align security with the broader business objectives. By integrating security into the development and operations processes, organizations can streamline their operations, reduce costs, and improve efficiency. This approach also enables faster response times to security incidents, minimizing the impact of breaches and ensuring business continuity.

Moreover, agile security operations foster a culture of continuous improvement and learning. By embracing a mindset of iterative and incremental development, organizations can stay ahead of the constantly evolving threat landscape. They can continuously assess their security posture, identify gaps, and implement improvements to enhance their defenses.

In addition to technical aspects, Agile Security Operations emphasizes the importance of effective communication and collaboration within the organization. It teaches readers how to report to senior levels in the organization, secure funding for security initiatives, and build partnerships with other departments to enhance overall security posture.

By the end of this book, readers will be well-equipped to start implementing agile security operations in their organizations. They will have a solid understanding of the changing landscape of security operations, the tools and techniques required to sense and respond to attackers, and the strategies to design and develop a defensible security architecture.

Agile Security Operations is a valuable resource for security professionals, IT professionals, and anyone interested in enhancing the security posture of their organization. It provides a comprehensive and practical guide that covers the essential aspects of agile security operations, enabling readers to stay ahead of the curve and protect their valuable assets from emerging threats.

Weight: 482g
Dimension: 189 x 234 x 17 (mm)
ISBN-13: 9781801815512