Cyber Security Policy Guidebook

Inbunden, Engelska, 2012

AvJennifer L. Bayuk,Jason Healey,Paul Rohmeyer,Marcus H. Sachs,Jeffrey Schmidt,Joseph Weiss

1 559 kr

Beställningsvara. Skickas inom 5-8 vardagar. Fri frakt för medlemmar vid köp för minst 249 kr.

Drawing upon a wealth of experience from academia, industry, and government service, Cyber Security Policy Guidebook details and dissects, in simple language, current organizational cyber security policy issues on a global scale—taking great care to educate readers on the history and current approaches to the security of cyberspace. It includes thorough descriptions—as well as the pros and cons—of a plethora of issues, and documents policy alternatives for the sake of clarity with respect to policy alone. The Guidebook also delves into organizational implementation issues, and equips readers with descriptions of the positive and negative impact of specific policy choices.Inside are detailed chapters that: Explain what is meant by cyber security and cyber security policyDiscuss the process by which cyber security policy goals are setEducate the reader on decision-making processes related to cyber securityDescribe a new framework and taxonomy for explaining cyber security policy issuesShow how the U.S. government is dealing with cyber security policy issuesWith a glossary that puts cyber security language in layman's terms—and diagrams that help explain complex topics—Cyber Security Policy Guidebook gives students, scholars, and technical decision-makers the necessary knowledge to make informed decisions on cyber security policy.

Produktinformation

Utgivningsdatum2012-05-15
Mått191 x 241 x 20 mm
Vikt635 g
FormatInbunden
SpråkEngelska
Antal sidor288
FörlagJohn Wiley & Sons Inc
ISBN9781118027806

Tillhör följande kategorier

IT-säkerhet inom Data och IT

Dr. Jennifer L. Bayuk is an independent cyber security consultant and industry professor at Stevens Institute of Technology in Hoboken, New Jersey.Jason Healey runs the Cyber Statecraft Initiative at the Atlantic Council in Washington, DC.Dr. Paul Rohmeyer directs the Technology Information Management program at Stevens Institute of Technology in Hoboken, New Jersey.Marcus H. Sachs is the Vice President for National Security Policy at Verizon Communications.Jeffrey Schmidt is a cyber security technology entrepreneur.Joseph Weiss is an industrial control system cyber security author and consultant.

Foreword ixPreface xiAcknowledgments xv1 Introduction 11.1 What Is Cyber Security? 11.2 What Is Cyber Security Policy? 31.3 Domains of Cyber Security Policy 71.3.1 Laws and Regulations 71.3.2 Enterprise Policy 91.3.3 Technology Operations 101.3.4 Technology Configuration 101.4 Strategy versus Policy 112 Cyber Security Evolution 152.1 Productivity 152.2 Internet 212.3 e-Commerce 282.4 Countermeasures 342.5 Challenges 373 Cyber Security Objectives 393.1 Cyber Security Metrics 403.2 Security Management Goals 453.3 Counting Vulnerabilities 493.4 Security Frameworks 513.4.1 e-Commerce Systems 523.4.2 Industrial Control Systems 573.4.3 Personal Mobile Devices 623.5 Security Policy Objectives 674 Guidance for Decision Makers 694.1 Tone at the Top 694.2 Policy as a Project 714.3 Cyber Security Management 734.3.1 Arriving at Goals 744.3.2 Cyber Security Documentation 774.4 Using the Catalog 795 The Catalog Approach 835.1 Catalog Format 875.2 Cyber Security Policy Taxonomy 896 Cyber Security Policy Catalog 936.1 Cyber Governance Issues 946.1.1 Net Neutrality 956.1.2 Internet Names and Numbers 966.1.3 Copyrights and Trademarks 1036.1.4 Email and Messaging 1076.2 Cyber User Issues 1126.2.1 Malvertising 1166.2.2 Impersonation 1176.2.3 Appropriate Use 1216.2.4 Cyber Crime 1256.2.5 Geolocation 1366.2.6 Privacy 1386.3 Cyber Conflict Issues 1406.3.1 Intellectual Property Theft 1446.3.2 Cyber Espionage 1456.3.3 Cyber Sabotage 1506.3.4 Cyber Warfare 1506.4 Cyber Management Issues 1556.4.1 Fiduciary Responsibility 1626.4.2 Risk Management 1636.4.3 Professional Certification 1716.4.4 Supply Chain 1726.4.5 Security Principles 1756.4.6 Research and Development 1856.5 Cyber Infrastructure Issues 1866.5.1 Banking and Finance 1906.5.2 Health Care 1946.5.3 Industrial Control Systems 1977 One Government’s Approach to Cyber Security Policy 2117.1 U.S. Federal Cyber Security Strategy 2117.2 A Brief History of Cyber Security Public Policy Development in the U.S. Federal Government 2127.2.1 The Bombing of New York’s World Trade Center on February 26, 1993 2127.2.2 Cyber Attacks against the United States Air Force, March–May 1994: Targeting the Pentagon 2137.2.3 The Citibank Caper, June–October, 1994: How to Catch a Hacker 2147.2.4 Murrah Federal Building, Oklahoma City—April 19, 1995: Major Terrorism Events and Their U.S. Outcomes 2157.2.5 President’s Commission on Critical Infrastructure Protection— 1996 2167.2.6 Presidential Decision Directive 63—1998 2187.2.7 National Infrastructure Protection Center (NIPC) and ISACs— 1998 2197.2.8 Eligible Receiver— 1997 2197.2.9 Solar Sunrise— 1998 2207.2.10 Joint Task Force—Computer Network Defense (JTF-CND)— 1998 2217.2.11 Terrorist Attacks against the United States—September 11, 2001 Effects of Catastrophic Events on Transportation System Management and Operations 2227.2.12 U.S. Government Response to the September 11, 2001 Terrorist Attacks 2247.2.13 Homeland Security Presidential Directives 2267.2.14 National Strategies 2277.3 The Rise of Cyber Crime 2307.4 Espionage and Nation-State Actions 2327.5 Policy Response to Growing Espionage Threats: U.S. Cyber Command 2337.6 Congressional Action 2357.7 Summary 2368 Conclusion 239Glossary 243References 255Index 267