Effective Cybersecurity: A Guide to Using Best Practices and Standards

by William Stallings

William Stallings’ Effective Cybersecurity offers a comprehensive and unified explanation of the best practices and standards that represent proven, consensus techniques for implementing cybersecurity. Stallings draws on the immense work that has been collected in multiple key security documents, making this knowledge far more accessible than it has ever been before. Effective Cybersecurity is organized to align with the comprehensive Information Security Forum document The Standard of Good Practice for Information Security, but deepens, extends, and complements ISF’s work with extensive insights from the ISO 27002 Code of Practice for Information Security Controls, the NIST Framework for Improving Critical Infrastructure Cybersecurity, COBIT 5 for Information Security, and a wide spectrum of standards and guidelines documents from ISO, ITU-T, NIST, Internet RFCs, other official sources, and the professional, academic, and industry literature. In a single expert source, current and aspiring cybersecurity practitioners will find comprehensive and usable practices for successfully implementing cybersecurity within any organization. Stallings Beyond requiring a basic understanding of cryptographic terminology and applications, this book is all technology areas are explained without requiring other reference material. Each chapter contains a clear technical overview, as well as a detailed discussion of action items and appropriate policies. Stallings, author of 13 TAA Computer Science Textbooks of the Year, offers many pedagogical features designed to help readers master the material. These clear learning objectives, keyword lists, and glossaries to QR codes linking to relevant standards documents and web resources.

800 pages, Paperback

Published August 31, 2018

About the author

William Stallings is an American author. He has written computer science textbooks on operating systems, computer networks, computer organization, and cryptography.

Reviews

[Dmitry · Rating 5 out of 5]

Очень объемная и подробная книга, предназначенная для специалистов в области ИБ. Ее нет смысла читать, если вы просто хотите познакомиться с основами информационной безопасности. Но если нужны подробные рекомендации по всем этапам организации, планирования, внедрения и поддержки процессов ИБ на предприятии - это книга для вас.
Содержит массу ссылок на нормативные документы, приводятся конкретные примеры и шаблоны. Так что с ней стоит работать постоянно, используя как справочник по всем необходимым направлениям.