Cyber Breach Response That Actually Works: Organizational Approach to Managing Residual Risk

Cyber Breach Response That Actually Works provides a holistic views of the aspects of cyber breach response that key leaders should consider before building capabilities with their organizations. The book describes the drivers behind cyber incident response and articulates how to build and effective incident response capability. The book delivers a framework-agnostic approach based in the author's field experience with Fortune 500 organizations. This approach goes beyond technical steps and capabilities and addresses incident response risk management, strategy, and organizational needs.

《真正有效的網路入侵應對》提供了一個全面的網路入侵應對觀點，讓關鍵領導者在建立組織能力之前考慮。本書描述了網路事件應對背後的驅動因素，並說明如何建立有效的事件應對能力。本書提供了一種基於作者在財富500強組織中的實戰經驗的框架無關方法。這種方法超越了技術步驟和能力，並解決了事件應對風險管理、策略和組織需求等問題。

Andrew Gorecki is a cybersecurity professional with experience across various IT and cybersecurity disciplines, including engineering, operations, and incident response. Originally from Europe, he provided consulting services across various industry sectors in the U.S., the UK, and other European countries. At the time of writing, he manages a team of incident response consultants within the X-Force IRIS competency of IBM Security where he leads investigations into large-scale breaches for Fortune 500 organizations, delivers proactive incident response services, and provides executive-level consulting on building and optimizing incident response programs.

Andrew Gorecki 是一位資訊安全專業人員，擁有跨越各種資訊科技和資訊安全領域的經驗，包括工程、運營和事件應對。他原籍歐洲，在美國、英國和其他歐洲國家為各行業提供諮詢服務。目前，他在IBM Security的X-Force IRIS能力中管理一支事件應對顧問團隊，負責領導針對財富500強企業的大規模違規事件進行調查，提供主動式事件應對服務，並就建立和優化事件應對計劃提供高層次的諮詢。