Businesses today are at a new turning point. Cybersecurity issues are making headlines around the world, impacting company reputations for years (such as Sony), changing the value and direction of businesses (Yahoo), and possibly influencing elections around the world. This book covers none of those things. This book is about you. You are an owner or executive in a business that is likely not on the Fortune 100 list. Others in your industry have been hit by cybersecurity issues. You know that there is something to be concerned about, but you don’t know exactly what to focus on. This book will educate you on how to close that gap. Secure Enough? Is the only book that guides you through the 20 toughest cybersecurity questions you will face—helping you to speak knowledgably with technology and cybersecurity specialists. No longer will you feel like a fish out of water when you talk about cybersecurity issues that could harm your business. Cybersecurity breaches can cost you revenue, damage your brand, and could even land you in jail! Government regulations such as HIPAA carry large fines and serious prison time. In Secure Enough? you will You’ll get up to speed fast on the most important questions to ask about cybersecurity, in easy-to-understand terms, to keep your company safe.
“If you spend more on coffee than on IT security, you will be hacked. What’s more, you deserve to be hacked.”
"It’s going to get worse before it gets better. Much like automobile safety of the mid-20th century or manufacturing safety during the Great Depression, history has taught us that there has to be a lot of carnage before substantial work is done to fix things. We need to develop fundamentally cyber-safe systems."
This is an easy-to-read primer for executives and senior business leaders on the subject of cybersecurity. It is structured in a Q&A format that address 20 common questions in the field. These include:
Where is my data and how do I secure it? How valuable a target is my company? Why isn't law enforcement doing more about cybercrime? What standards should my company use as the basis for a cybersecurity program?
The author covers topics at a very high level and provides a useful matrix for understanding the importance of a host of relevant hot-button topics such as:
Data classification Quantifying cybersecurity risk Ransomware as a Service Hacktivism Internet of Things DMZ's Multifactor authentication Red forests Zero trust networks Using quantum computers to break existing forms of cryptography
I recommend this as a resource if you want to get up to speed on the basics of cybersecurity in a short span of time.
Great Cybersecurity primer for non-technical and technical folks alike
Really helpful in framing why cybersecurity initiatives are necessary and lays out good first steps in thinking about them. Really enjoyed this read and will likely return to it regularly.
Exactly as advertised. This is the book I would give an executive looking to get up to speed on information security. Thorough without getting lost in the details, with each chapter brought to life by a simple anecdote and closed out with clear actionable questions. Highly recommended.