Cybersecurity for the Enterprise: How to Design a Security Policy with Evidence-Based Methods

Cybersecurity for the Enterprise: How to Design a Security Policy with Evidence-Based Methods is a call to action for enterprises to demand a modern, data-driven approach to cybersecurity. It provides a how-to guide for designing and implementing a security policy based on empirical research, introducing techniques to critically review available research and evaluate the credibility of the findings. The book includes templates with policy language that maximize impact on the typical employee, reviews of current research that challenge industry best practices, and highlights areas in conventional security policy and industry standards that lack empirical support. It is ideal for information security executives, managers, and other leaders.

Format: Hardback
Length: 448 pages
Publication date: 23 May 2023
Publisher: John Wiley & Sons Inc

Cybersecurity is a critical issue for enterprises, as the increasing sophistication of cyber threats makes it essential to have a robust security policy in place. A call to action for enterprises to demand a modern, data-driven approach to cybersecurity, Cybersecurity for the Enterprise: How to Design a Security Policy with Evidence-Based Methods delivers a how-to guide for the design and implementation of a modern security policy in an enterprise firm that is based on empirical research instead of current industry consensus alone.

The author explains how to structure a streamlined policy and differentiate between policy statements based on data and those based on industry habit. He explores the measurement of the efficacy of controls and provides practical demonstrations of how to justify evidence-based policies to internal and external stakeholders. The book also includes templates with policy language that maximize impact on the typical employee, reviews of current research that challenge the status quo and evolve industry best practices, highlights of areas in conventional security policy and industry standards that lack empirical support, and an efficient lens for how to prioritize what really matters in a security policy and how to ignore irrelevant "noise."

Ideal for information security executives, managers, and other leaders, Cybersecurity for the Enterprise is an essential blueprint for maximizing the impact of practical research and creating a security infrastructure based on real-world evidence.

Weight: 666g
ISBN-13: 9781119873341