商品描述
Understand and respond to a new generation of cybersecurity threats
Cybersecurity has never been a more significant concern of modern businesses, with security breaches and confidential data exposure as potentially existential risks. Managing these risks and maintaining compliance with agreed-upon cybersecurity policies is the focus of Cybersecurity Governance and Risk Management. This field is becoming ever more critical as a result. A wide variety of different roles and categories of business professionals have an urgent need for fluency in the language of cybersecurity risk management.
The Cybersecurity Guide to Governance, Risk, and Compliance meets this need with a comprehensive but accessible resource for professionals in every business area. Filled with cutting-edge analysis of the advanced technologies revolutionizing cybersecurity--and increasing key risk factors at the same time--and offering practical strategies for implementing cybersecurity measures, it is a must-own for CISOs, boards of directors, tech professionals, business leaders, regulators, entrepreneurs, researchers, and more.
The Cybersecurity Guide to Governance, Risk, and Compliance readers will also find:
- Over 1300 actionable recommendations found after each section
- Detailed discussion of topics including AI, cloud, and quantum computing
- More than 70 ready-to-use KPIs and KRIs
"This guide's coverage of governance, leadership, legal frameworks, and regulatory nuances ensures organizations can establish resilient cybersecurity postures. Each chapter delivers actionable knowledge, making the guide thorough and practical." -- Gary McAlum, CISO.
"This guide represents the wealth of knowledge and practical insights that Jason and Griffin possess. Designed for professionals across the board, from seasoned cybersecurity veterans to business leaders, auditors, and regulators, this guide integrates the latest technological insights with governance, risk, and compliance (GRC)." -- Wil Bennett, CISO
商品描述(中文翻譯)
了解並應對新一代的網絡安全威脅
網絡安全從未像現代企業那樣成為一個更重要的關注點，安全漏洞和機密數據曝光可能對企業造成毀滅性的風險。管理這些風險並遵守約定的網絡安全政策是《網絡安全治理與風險管理》的重點。隨著這一領域的重要性不斷增加，各種不同角色和業務專業人士迫切需要掌握網絡安全風險管理的語言。
《網絡安全治理、風險和合規指南》以全面但易於理解的資源滿足了專業人士在各個業務領域的需求。該書充滿了對革命性網絡安全技術的前沿分析，同時也提供了實施網絡安全措施的實用策略，是CISO、董事會成員、技術專業人員、商業領袖、監管機構、企業家、研究人員等必備的工具。
《網絡安全治理、風險和合規指南》的讀者還將找到：
- 每個章節後面的1300多個可操作建議
- 詳細討論包括人工智能、雲計算和量子計算在內的主題
- 70多個可立即使用的關鍵績效指標和關鍵風險指標
“這本指南對治理、領導、法律框架和監管細微差別的涵蓋確保組織能夠建立有彈性的網絡安全姿態。每一章都提供可操作的知識，使指南變得全面而實用。” - Gary McAlum, CISO
“這本指南代表了Jason和Griffin所擁有的豐富知識和實用見解。這本指南針對各種專業人士，從經驗豐富的網絡安全老將到商業領袖、審計師和監管機構，將最新的技術見解與治理、風險和合規(GRC)相結合。” - Wil Bennett, CISO
作者簡介
Dr. Jason Edwards, DM, CISSP, CRISC, is an esteemed cybersecurity expert and accomplished industry leader with over 25 years in cybersecurity, risk, and compliance, backed by a specialized doctorate in Cybersecurity Regulatory Risk and Compliance. A prolific educator and influencer, Dr. Edwards contributes as an Adjunct Cyber Professor at multiple universities and is recognized as a leading cybersecurity voice on LinkedIn. His portfolio includes many publications, including the notable Cyber Spear educational newsletter. In addition to his remarkable professional achievements, Dr. Edwards proudly served as a distinguished combat veteran and premier military cyber officer.
Griffin Weaver, JD, serves as the Managing Legal Director at a renowned technology company and is also a respected Adjunct Professor specializing in Cybersecurity Law. With a rich background encompassing various technical and managerial roles in IT, Griffin seamlessly transitioned into a flourishing legal career after earning his law degree from the University of Utah. As an acknowledged thought leader, Griffin has enhanced the domain with his scholarly contributions through numerous articles. He is a sought-after speaker renowned for his insightful presentations at cybersecurity conferences.
作者簡介(中文翻譯)
Dr. Jason Edwards, DM, CISSP, CRISC, 是一位備受尊敬的資訊安全專家和成就卓越的行業領袖，擁有超過25年的資訊安全、風險和合規經驗，並擁有專業的博士學位，專攻資訊安全監管風險和合規。作為一位多產的教育家和影響者，Dr. Edwards擔任多所大學的兼職資訊安全教授，並被譽為領先的資訊安全專家在LinkedIn上的聲音。他的作品包括許多出版物，其中包括著名的Cyber Spear教育通訊。除了卓越的專業成就外，Dr. Edwards還自豪地擔任過傑出的戰鬥退伍軍人和頂尖的軍事資訊安全官員。
Griffin Weaver, JD, 擔任一家知名科技公司的法律總監，同時也是一位受人尊敬的兼職教授，專攻資訊安全法律。Griffin在從猶他大學獲得法學學位後，以其豐富的技術和管理角色背景順利轉入蓬勃發展的法律職業生涯。作為一位公認的思想領袖，Griffin通過眾多文章豐富了這個領域。他是一位備受追捧的演講者，以其深入的洞察力在資訊安全會議上進行精彩的演講。
