Search icon CANCEL
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Conferences
Free Learning
Arrow right icon
Cybersecurity Strategies and Best Practices
Cybersecurity Strategies and Best Practices

Cybersecurity Strategies and Best Practices: A comprehensive guide to mastering enterprise cyber defense tactics and techniques

eBook
€20.98 €29.99
Paperback
€25.99 €37.99
Subscription
Free Trial
Renews at €18.99p/m

What do you get with Print?

Product feature icon Instant access to your digital eBook copy whilst your Print order is Shipped
Product feature icon Paperback book shipped to your preferred address
Product feature icon Download this book in EPUB and PDF formats
Product feature icon Access this title in our online reader with advanced features
Product feature icon DRM FREE - Read whenever, wherever and however you want
Product feature icon AI Assistant (beta) to help accelerate your learning
Table of content icon View table of contents Preview book icon Preview Book

Cybersecurity Strategies and Best Practices

Identifying and Assessing Organizational Weaknesses

The cornerstones of any successful cybersecurity strategy are identifying and effectively assessing organizational weaknesses as well prioritizing business needs and roadmaps. With the rapidly evolving threat landscape and continuous increase of the attack surface and sheer volume of attacks itself, we must be able to make faster, smarter decisions. Weaknesses can span from unpatched software to negligent insider behavior, which can create exploitable gaps in security. Utilizing techniques such as compliance and regulatory requirements, business needs, emerging new technologies and threats, vulnerability assessments, penetration testing, and threat modeling help identify and assess these weaknesses. Additionally, cybersecurity strategies also should be defined in a way that meets future business growth and enhancement transitions.

Vulnerability scanning and penetration testing are critical components of a robust cybersecurity assessment framework. The former identifies potential points of exploitation in a system or network, while the latter simulates cyberattacks to test resilience. Risk assessments quantify or qualify the potential impacts of identified vulnerabilities. It’s a crucial process that enables an organization to understand the consequences of exploited vulnerabilities and facilitates better decision-making around cybersecurity investments and strategies.

Post-assessment, it’s crucial to prioritize and remediate weaknesses, which involves developing and executing a mitigation plan. Prioritization typically depends on factors including the criticality of the system, the potential impact of a breach, and the exploitability of the vulnerability.

By adhering to these practices, organizations can build a more resilient cyber defense system, ensuring business continuity and integrity of their information assets.

Understanding organizational weaknesses and vulnerabilities

Understanding the differences between organizational weaknesses and vulnerabilities is paramount to forming an effective cybersecurity strategy. Weaknesses are generally flaws or deficiencies in a system that can lead to its compromise, while vulnerabilities denote weaknesses in software that outside actors can exploit. Addressing these issues might require patching a piece of software and introducing better security policies, as well as user awareness and training initiatives.

While technical problems are a risk, process-related weaknesses such as inadequate security policies or incident response plans must also be considered. Moreover, human-based vulnerabilities such as employee unawareness can open an organization to social engineering attacks. Organizations must remain committed to understanding and defending against organizational weaknesses and vulnerabilities as the threat landscape changes. Doing so will enable them to build a comprehensive, robust cybersecurity strategy.

Types of organizational weaknesses

Let’s explore the different types of organizational weaknesses. While there might be other ways to categorize them, when looking at organizational weaknesses from a 50,000-foot perspective, it boils down to three categories: technical, process, and human.

A black background with a black square

Description automatically generated with medium confidence

Technical: Software, network, and hardware vulnerabilities can lead to technical weaknesses. Outdated hardware or software (e.g., firmware, operating systems, applications, etc.) that are not patched and secured or systems incorrectly configured can be a major security issue. For example, operating systems running older software versions without the most recent security updates can cause significant problems for computer users and networks. Ensuring all components are up to date with the latest security patches is essential for protecting against technical weaknesses. Additionally, all hardware installations should be securely implemented and network endpoints adequately protected to avoid potential vulnerabilities.

A black background with a black square

Description automatically generated with medium confidence

Process: Organizations need adequate security policies and well-defined change management processes. Without which the organizations are left vulnerable to various threats. This could be anything from inadequate backup procedures to an insufficient incident response strategy in the event of a ransomware attack. While organizations must be prepared for such disasters, they need more than just a robust disaster recovery plan; they need to ensure they have the necessary protocols and procedures to respond quickly and effectively to potential incidents.

A handshake with a black background

Description automatically generated

Human: Humans are prone to mistakes, a fact that can lead to security incidents. This can be due to personnel lacking cybersecurity education, leaving them vulnerable to social engineering techniques such as phishing scams. It is also possible for insiders, whether by malicious intent or accident, to unwittingly cause significant security breaches. To prevent this, organizations must prioritize educating their staff on cybersecurity protocols and strategies and ensuring strict regulations are in place.

While these categories help structure our understanding of weaknesses, it’s essential to remember that they often interact. For instance, a technical weakness can be exploited due to a process weakness (such as a lack of patch management) facilitated by a human weakness (perhaps clicking on a phishing link). This interconnectedness makes addressing all weaknesses vital to a comprehensive cybersecurity strategy.

Types of organizational vulnerabilities

Let’s look closer into what types of organizational vulnerabilities exist. Similar to organizational weaknesses, there are many variations. We can categorize them into software, hardware, and network vulnerabilities. Let’s explore these categories and consider practical examples to understand them better.

A black background with white text

Description automatically generated

Software vulnerabilities: This type of vulnerability allows malicious actors to break into a system and cause harm. To prevent such threats from occurring, it is critical to ensure that all applications are up-to-date with the latest security patches and fixes. As an example, in 2017, the WannaCry ransomware attack exploited a flaw in Microsoft’s Server Message Block protocol that, if not patched, could have allowed an attacker to access the system. WannaCry is suspected to have spread to 150 countries, and the cybercrime caused an estimated $4 billion in losses across the globe.

A black circuit board with many points

Description automatically generated

Hardware vulnerabilities: These are weaknesses in the physical components of a system that can lead to data leakage and theft. In 2018, two major hardware security flaws, Spectre and Meltdown, were discovered to affect modern AMD, Intel, and ARM processors. These vulnerabilities allowed malicious programs to access sensitive information stored in the computer’s processor by exploiting its speculative execution feature. As a result, virtually all devices running on these processors were vulnerable to attacks.

A black background with a black square

Description automatically generated with medium confidence

Network vulnerabilities: Vulnerabilities in network architecture and protocols can make systems susceptible to malicious attacks if configurations are left unsecured. For example, a Wi-Fi network that has not been adequately secured with encryption could easily be accessed by attackers, who can intercept traffic and steal confidential information.

As security professionals, it is crucial to be aware of the organization’s environment’s vulnerabilities. Knowing how these security flaws can be utilized maliciously is essential in implementing effective defensive techniques. Organizations should prioritize practices such as patching software regularly and ensuring secure configurations when it comes to network settings, as these measures can significantly reduce the chances of an attacker successfully exploiting a vulnerability.

Real-world examples

The global logistics company Maersk experienced a cyberattack in 2017 called NotPetya, triggered by a software vulnerability in their accounting software. This cyberattack resulted in the shutdown of 76 port terminals worldwide, taking Maersk two grueling weeks to restore its systems and costing an estimated $300 million.

Similarly, the 2017 Equifax breach compromised the sensitive data of approximately 147 million consumers when attackers exploited an unpatched Apache Struts web application vulnerability. This incident incurred major reputational damage and legal repercussions, with a whopping $575-million settlement.

The 2020 SolarWinds hack further highlighted the consequences of supply chain weaknesses, as hackers infiltrated SolarWinds’ software development process and inserted a backdoor into an update for over 18,000 customers.

These examples demonstrate that managing organizational weaknesses and vulnerabilities is essential to mitigating damage and avoiding hefty costs. As such, it is crucial to maintain robust security protocols across all digital supply chain points and build an effective cybersecurity framework that promptly identifies, assesses, and remediates any vulnerabilities.

This is an essential lesson for all organizations to remember—the cost of not adequately addressing weaknesses and vulnerabilities can be immense. Organizations must prioritize the development of secure software solutions, protecting their digital supply chain, and mitigating human vulnerabilities to protect themselves from future cyberattacks.

Companies can proactively address security threats by adequately identifying and mitigating organizational weaknesses and vulnerabilities before they become damaging incidents.

Effective vulnerability management is essential for maintaining a strong cybersecurity posture. It enables businesses to identify risks associated with new technologies, keep ahead of emerging threats, and ensure business continuity in today’s increasingly digital world. With proper implementation, organizations can rest assured that their critical assets are safe from malicious actors and prepared to address any security vulnerabilities quickly and efficiently.

Organizations face various vulnerabilities in their systems, which spans across software, hardware, and network vulnerabilities that can be exploited by threat actors. Instances such as the WannaCry ransomware attack, NotPetya, the Spectre and Meltdown hardware flaws, and insecure network configurations underscore the need for robust security measures. The high-profile attacks on Maersk, Equifax, and SolarWinds highlight the potential damage and financial costs of these vulnerabilities. Therefore, it’s crucial for organizations to proactively identify and mitigate these vulnerabilities, maintaining secure software solutions, protecting their digital supply chain, and training their staff to avoid cyberattacks. In doing so, companies can ensure their essential assets are protected and can deal with security threats swiftly and effectively.

Techniques for identifying and assessing weaknesses

Identifying and assessing systems and processes’ weaknesses is integral to maintaining a secure environment. This helps detect possible points of exploitation and inform the development of effective security strategies.

Identification involves finding potential threats that could be exploited by malicious actors, such as outdated software, insecure configurations, insufficient policies, and even human factors such as a lack of awareness about cybersecurity. Assessment involves evaluating the identified risks to understand their impact and likelihood of exploitation, including severity ratings, the probability of exploitation, and the potential consequences.

Various techniques are available for these activities, from security audits and vulnerability assessments to penetration testing and social engineering tests. The method will depend on the organization’s industry, the sensitivity of the data handled, the size of an organization, and the threat landscape.

By regularly identifying and assessing weaknesses within their systems and processes, organizations can effectively detect potential threats while minimizing their impacts if a successful attack occurs. This can help them remain one step ahead of cybercriminals and reduce the chances of a successful attack.

Security audits

Security audits should always be considered as they are essential for assessing and identifying flaws in an organization’s IT protocols, systems, and policies. This is achieved by examining how well existing requirements and criteria are being met within the company.

Internal audits are conducted by a company’s personnel or hired subject matter experts (SMEs) and focus on identifying weaknesses, such as outdated technology, misconfigurations, or non-conformity with internal rules. On the other hand, external audits are conducted by third-party organizations. Audits are often required to adhere to specific regulations such as ISO 27001, which deals with the overall management of information security, or the Payment Card Industry Data Security Standard (PCI DSS). It is important to be aware that government bodies can demand regulatory audits to ensure that regulations such as the Health Insurance Portability and Accountability Act (HIPAA) for healthcare firms or the General Data Protection Regulation (GDPR) for firms that manage European Union (EU) citizens’ information are respected and that organizations are in compliance with them.

Furthermore, depending on the type of the business and its industry scope, additional regulatory compliance based on its geographic location may be applied as well. Hence, organizations define information security policies and standards accordingly to meet their own internal information security requirements as well as the regulatory requirements they are obliged to adhere to.

Security systems and processes require regular check-ups to identify weak points that could be exploited by threat actors. This process includes finding potential risks, such as insufficient security policies or outdated software, and assessing these risks based on their severity and likelihood of exploitation. Regular internal and external security audits are crucial to identify areas of improvement and ensure the organization complies with various regulations. These measures significantly reduce the risk of data breaches, keeping the organization one step ahead of potential threats.

Vulnerability assessments

Vulnerability assessments are critical to any organization’s information security strategy, as they provide an in-depth analysis of weaknesses across their digital estate, including systems, networks, and infrastructure. These assessments can be conducted through automated scanning and manual reviews. Vulnerability management starts with asset discovery, where organizational assets are identified and cataloged. Next, vulnerability scanning is conducted to detect security weaknesses within the system. Following this, a vulnerability assessment is carried out, involving the evaluation and prioritization of the vulnerabilities based on their potential risk. The final step is vulnerability remediation, where solutions are applied to fix or mitigate the detected vulnerabilities, thereby enhancing the security posture of the organization.

Figure 2.1 – Step-by-step vulnerability assessment process

Figure 2.1 – Step-by-step vulnerability assessment process

Automated scanning involves running specialized tools, such as commercial software (e.g., Tenable Nessus, Qualys, or Rapid7 Nexpose) or open source products against databases of known vulnerabilities such as the Common Vulnerabilities and Exposures (CVE) list. These tools generate reports with details about the detected vulnerabilities and the recommended remediations.

Manual reviews involve security professionals thoroughly reviewing systems and processes to identify potential weaknesses that automated tools may miss. Due to the automation, additional vetting may be required to perform the next level of risk assessment and false-positive review to minimize the impact on operations. As part of this review, additional inputs from threat intelligence sources, targeted system threat landscapes, and system criticality could enhance the efficiency of the risk assessment process.

Once vulnerabilities are identified, they must be prioritized according to their severity, the sensitivity of the affected system, and the potential impact of a breach. This is an essential step, as it’s important to acknowledge that there will always be vulnerabilities. At the same time, regardless of the organization’s size, we always need to prioritize the workload. This prioritization helps organizations effectively allocate resources to address the most critical vulnerabilities first. By performing regular vulnerability assessments, organizations can keep their security posture up to date and minimize the risk of exploitation by attackers for malicious purposes.

Organizations should ensure their vulnerability assessment program is comprehensive enough to comply with applicable laws and regulations while providing sufficient protection against potential threats. This can involve leveraging specialized tools for automated scanning and engaging qualified personnel for manual reviews as part of a well-rounded approach to security evaluation. When done correctly, vulnerability assessments can go a long way in improving organizational cybersecurity.

By taking the necessary steps to assess and remediate vulnerabilities, organizations can significantly reduce their risk of being exploited by attackers, enhancing their security posture, and staying compliant with applicable regulations.

Vulnerability assessments help organizations identify and fix security weaknesses in their digital estate, which is critical for their cybersecurity strategy. This process involves identifying and cataloging all digital assets, scanning them for any potential vulnerabilities, evaluating these vulnerabilities, and then applying appropriate solutions to resolve them. Both automated tools and manual reviews by security professionals are used, and vulnerabilities are prioritized based on their severity and potential impact. Regular assessments enable organizations to stay updated on their security status and lower the risk of cyberattacks. Essentially, these assessments help organizations strengthen their digital defenses and stay in line with relevant laws and regulations.

Threat modeling

Threat modeling is a proactive approach to security that enables organizations to anticipate and prepare for potential cyberattacks. At its core, through threat identification, analysis, and risk assessment, organizations can determine which threats pose the most significant risks and develop strategies to mitigate them. This approach helps organizations to proactively anticipate and prepare for attacks rather than just reacting to security incidents.

One widely recognized methodology is STRIDE (which stands for Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege), developed by Microsoft. This approach focuses on the types of attacks that could occur and helps organizations develop targeted defense strategies.

Threat

Desired Security Property

Spoofing

Authentication

Tampering

Integrity

Repudiation

Non-repudiation

Information disclosure

Confidentiality

Denial of service

Availability

Elevation of privilege

Authorization

Another model is DREAD (short for Damage Potential, Reproducibility, Exploitability, Affected Users, and Discoverability). This model quantifies each threat’s risk level to prioritize mitigation efforts.

Threat

Desired Security Property

Damage

How bad would the attack be?

Reproducibility

How easy is it to reproduce attack?

Exploitability

How easy is it to recreate the attack?

Affected users

How many users could be impacted?

Discoverability

How easy is it to discover the attack?

The Process for Attack Simulation and Threat Analysis (PASTA) model is a more complete seven-step process combining threat identification and risk assessment.

Figure 2.3 – The seven stages of the PASTA model

Figure 2.3 – The seven stages of the PASTA model

The best way for an organization to embrace threat modeling is by creating a proactive security culture. Teams should be encouraged to continuously monitor their systems and look for potential threats, such as new vulnerabilities or malicious actors. This will help organizations stay ahead of the ever-evolving digital threat landscape and better defend against cyberattacks.

Threat modeling helps organizations predict and prepare for potential cyber threats. It involves identifying potential threats, analyzing them, and assessing their risks to design defense strategies. Different models exist for this, such as STRIDE from Microsoft, which outlines types of attacks, DREAD, which scores the risk level of each threat, and PASTA, a comprehensive seven-step process that combines threat identification and risk assessment. To effectively use threat modeling, organizations need to foster a proactive security culture, encouraging teams to constantly monitor their systems for possible threats such as new vulnerabilities or malicious activity. This approach allows organizations to stay on top of the rapidly changing digital threat landscape and defend against cyberattacks more effectively.

Penetration testing

Penetration testing, more commonly known as ‘pen testing,’ is an authorized and proactive method of identifying security vulnerabilities in a system by simulating a cyberattack. Whereas vulnerability assessments are used to identify weaknesses, penetration tests go one step further by actively attempting to exploit these weaknesses to assess the potential damages should there be a breach.

Pen tests can come in many forms, including black-box testing, which mimics an external attacker without any prior knowledge of the system; white-box testing, which replicates an insider attack with a comprehensive understanding of the system; and grey-box testing, which is a combination of the two and provides a balanced approach to detecting potential vulnerabilities.

Once completed, a penetration test wraps up by creating a detailed report outlining all discovered vulnerabilities, the data accessed, and the recommended remediation actions. Tools that are highly popular when carrying out pen tests include Metasploit for developing and executing exploit code against target machines and Burp Suite for web application security tests.

Figure 2.4 – Burp Suite, a tool used for web application security testing

Figure 2.4 – Burp Suite, a tool used for web application security testing

Conducting regular penetration tests provides organizations with validation of their security controls, plus the ability to uncover hidden threats before they become too serious. It is an essential aspect of any strong cybersecurity program and ensures that systems remain resilient from attacks while preparing companies for real-world threats.

Social engineering tests

Social engineering tests are a vital tool for determining the potential vulnerabilities that stem from an organization’s human-centric components. These tests simulate various social engineering attacks to evaluate the extent of employees’ observance of security protocols.

The most common type of test is a phishing simulation, which involves sending malicious emails to employees to assess their ability to recognize and report attacks.

Figure 2.5 – Phishing simulation example

Figure 2.5 – Phishing simulation example

Other social engineering tests include pretexting tests, which occur when an attacker fabricates a false scenario to acquire confidential information or unauthorized access to systems. Impersonating an IT support person who requests a password reset is one example of such a deception.

Tailgating tests examine the effectiveness of physical security measures while also testing employees’ adherence to these principles by attempting entry into restricted areas by following authorized personnel after creating some sort of urgency or relying on politeness.

Baiting tests use malicious devices, such as USB drives, as bait that curious employees may unknowingly plug into a computer and inadvertently install the malware.

The results from social engineering tests are highly beneficial to understanding how humans influence an organization’s security posture. Through these assessments, areas where employees require additional training and awareness can be identified and highlighted, illustrating that strong cybersecurity is not just about technology but also people and their decisions. Such tests further emphasize the need to cultivate a security-first culture within any organization since humans are the weakest link in any cybersecurity defense strategy.

Social engineering tests are essential to any organization’s security system. They play a significant role in determining the weak points of an organization’s human-centric defenses and can help identify areas where further training and awareness are needed. Ultimately, these tests serve as vital tools for uncovering potential vulnerabilities that may arise from human error or negligence.

Left arrow icon Right arrow icon

Key benefits

  • Benefit from a holistic approach and gain practical guidance to align security strategies with your business goals
  • Derive actionable insights from real-world scenarios and case studies
  • Demystify vendor claims and make informed decisions about cybersecurity solutions tailored to your needs
  • Purchase of the print or Kindle book includes a free PDF eBook

Description

If you are a cybersecurity professional looking for practical and actionable guidance to strengthen your organization’s security, then this is the book for you. Cybersecurity Strategies and Best Practices is a comprehensive guide that offers pragmatic insights through real-world case studies. Written by a cybersecurity expert with extensive experience in advising global organizations, this guide will help you align security measures with business objectives while tackling the ever-changing threat landscape. You’ll understand the motives and methods of cyber adversaries and learn how to navigate the complexities of implementing defense measures. As you progress, you’ll delve into carefully selected real-life examples that can be applied in a multitude of security scenarios. You’ll also learn how to cut through the noise and make informed decisions when it comes to cybersecurity solutions by carefully assessing vendor claims and technology offerings. Highlighting the importance of a comprehensive approach, this book bridges the gap between technical solutions and business strategies to help you foster a secure organizational environment. By the end, you’ll have the knowledge and tools necessary to improve your organization's cybersecurity posture and navigate the rapidly changing threat landscape.

Who is this book for?

This book is for security professionals and decision makers tasked with evaluating and selecting cybersecurity solutions to protect their organization from evolving threats. While a foundational understanding of cybersecurity is beneficial, it’s not a prerequisite.

What you will learn

  • Adapt to the evolving threat landscape by staying up to date with emerging trends
  • Identify and assess vulnerabilities and weaknesses within your organization's enterprise network and cloud environment
  • Discover metrics to measure the effectiveness of security controls
  • Explore key elements of a successful cybersecurity strategy, including risk management, digital forensics, incident response, and security awareness programs
  • Get acquainted with various threat intelligence sharing platforms and frameworks
Estimated delivery fee Deliver to Czechia

Premium delivery 7 - 10 business days

€25.95
(Includes tracking information)

Product Details

Country selected
Publication date, Length, Edition, Language, ISBN-13
Publication date : May 24, 2024
Length: 252 pages
Edition : 1st
Language : English
ISBN-13 : 9781803230054
Category :
Concepts :

What do you get with Print?

Product feature icon Instant access to your digital eBook copy whilst your Print order is Shipped
Product feature icon Paperback book shipped to your preferred address
Product feature icon Download this book in EPUB and PDF formats
Product feature icon Access this title in our online reader with advanced features
Product feature icon DRM FREE - Read whenever, wherever and however you want
Product feature icon AI Assistant (beta) to help accelerate your learning
Estimated delivery fee Deliver to Czechia

Premium delivery 7 - 10 business days

€25.95
(Includes tracking information)

Product Details

Publication date : May 24, 2024
Length: 252 pages
Edition : 1st
Language : English
ISBN-13 : 9781803230054
Category :
Concepts :

Packt Subscriptions

See our plans and pricing
Modal Close icon
€18.99 billed monthly
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Simple pricing, no contract
€189.99 billed annually
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Choose a DRM-free eBook or Video every month to keep
Feature tick icon PLUS own as many other DRM-free eBooks or Videos as you like for just €5 each
Feature tick icon Exclusive print discounts
€264.99 billed in 18 months
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Choose a DRM-free eBook or Video every month to keep
Feature tick icon PLUS own as many other DRM-free eBooks or Videos as you like for just €5 each
Feature tick icon Exclusive print discounts

Frequently bought together


Stars icon
Total 95.97 112.97 17.00 saved
Cybersecurity Architect's Handbook
€39.99 €44.99
Cybersecurity Strategies and Best Practices
€25.99 €37.99
Endpoint Detection and Response Essentials
€29.99
Total 95.97 112.97 17.00 saved Stars icon

Table of Contents

14 Chapters
Chapter 1: Profiling Cyber Adversaries and Their Tactics Chevron down icon Chevron up icon
Chapter 2: Identifying and Assessing Organizational Weaknesses Chevron down icon Chevron up icon
Chapter 3: Staying Ahead: Monitoring Emerging Threats and Trends Chevron down icon Chevron up icon
Chapter 4: Assessing Your Organization’s Security Posture Chevron down icon Chevron up icon
Chapter 5: Developing a Comprehensive Modern Cybersecurity Strategy Chevron down icon Chevron up icon
Chapter 6: Aligning Security Measures with Business Objectives Chevron down icon Chevron up icon
Chapter 7: Demystifying Technology and Vendor Claims Chevron down icon Chevron up icon
Chapter 8: Leveraging Existing Tools for Enhanced Security Chevron down icon Chevron up icon
Chapter 9: Selecting and Implementing the Right Cybersecurity Solutions Chevron down icon Chevron up icon
Chapter 10: Bridging the Gap between Technical and Non-Technical Stakeholders Chevron down icon Chevron up icon
Chapter 11: Building a Cybersecurity-Aware Organizational Culture Chevron down icon Chevron up icon
Chapter 12: Collaborating with Industry Partners and Sharing Threat Intelligence Chevron down icon Chevron up icon
Index Chevron down icon Chevron up icon
Other Books You May Enjoy Chevron down icon Chevron up icon

Customer reviews

Rating distribution
Full star icon Full star icon Full star icon Full star icon Full star icon 5
(2 Ratings)
5 star 100%
4 star 0%
3 star 0%
2 star 0%
1 star 0%
esgar jimenez Jul 30, 2024
Full star icon Full star icon Full star icon Full star icon Full star icon 5
Milad Aslaner’s Cybersecurity Strategies and Best Practices is an exceptional resource for anyone involved in protecting enterprise environments from cyber threats. As a cybersecurity professional, I found this book to be both informative and practical, offering a wealth of knowledge that is immediately applicable to real-world scenarios. What sets this book apart are the useful insights and real-world examples. Aslaner doesn’t just discuss theories; he provides actionable advice that you can implement in your organization. The case studies are particularly useful, illustrating how the concepts discussed are applied in real-life situations. Overall, Cybersecurity Strategies and Best Practices are a must-have for anyone serious about mastering enterprise cyber defense. It’s a comprehensive, practical, and expertly written guide that will be a valuable addition to your cybersecurity library. I highly recommend it to both novices and seasoned professionals alike.
Amazon Verified review Amazon
Tomica Kaniski Jul 02, 2024
Full star icon Full star icon Full star icon Full star icon Full star icon 5
Book starts with a preparation of the stage for its main topic - cybersecurity strategy, by discussing the tactics and cyber adversaries, organizational weaknesses, and how to monitor and assess your organization's security posture. It all leads up to the chapter on developing your modern cybersecurity strategy, which will align security measures with your own business objectives. In chapters that follow, you will get more information about analyzing the vendor claims, possible biases, reputation, solutions, etc., while keeping the objective view of things. Remaining chapters cover the tools and their implementations, but also the "non-technical" topics like company culture, bridging the technology gaps and partnerships. All in all, I like this book as it provides a wealth of useful information, but it's easy to read and not too long.
Amazon Verified review Amazon
Get free access to Packt library with over 7500+ books and video courses for 7 days!
Start Free Trial

FAQs

What is the delivery time and cost of print book? Chevron down icon Chevron up icon

Shipping Details

USA:

'

Economy: Delivery to most addresses in the US within 10-15 business days

Premium: Trackable Delivery to most addresses in the US within 3-8 business days

UK:

Economy: Delivery to most addresses in the U.K. within 7-9 business days.
Shipments are not trackable

Premium: Trackable delivery to most addresses in the U.K. within 3-4 business days!
Add one extra business day for deliveries to Northern Ireland and Scottish Highlands and islands

EU:

Premium: Trackable delivery to most EU destinations within 4-9 business days.

Australia:

Economy: Can deliver to P. O. Boxes and private residences.
Trackable service with delivery to addresses in Australia only.
Delivery time ranges from 7-9 business days for VIC and 8-10 business days for Interstate metro
Delivery time is up to 15 business days for remote areas of WA, NT & QLD.

Premium: Delivery to addresses in Australia only
Trackable delivery to most P. O. Boxes and private residences in Australia within 4-5 days based on the distance to a destination following dispatch.

India:

Premium: Delivery to most Indian addresses within 5-6 business days

Rest of the World:

Premium: Countries in the American continent: Trackable delivery to most countries within 4-7 business days

Asia:

Premium: Delivery to most Asian addresses within 5-9 business days

Disclaimer:
All orders received before 5 PM U.K time would start printing from the next business day. So the estimated delivery times start from the next day as well. Orders received after 5 PM U.K time (in our internal systems) on a business day or anytime on the weekend will begin printing the second to next business day. For example, an order placed at 11 AM today will begin printing tomorrow, whereas an order placed at 9 PM tonight will begin printing the day after tomorrow.


Unfortunately, due to several restrictions, we are unable to ship to the following countries:

  1. Afghanistan
  2. American Samoa
  3. Belarus
  4. Brunei Darussalam
  5. Central African Republic
  6. The Democratic Republic of Congo
  7. Eritrea
  8. Guinea-bissau
  9. Iran
  10. Lebanon
  11. Libiya Arab Jamahriya
  12. Somalia
  13. Sudan
  14. Russian Federation
  15. Syrian Arab Republic
  16. Ukraine
  17. Venezuela
What is custom duty/charge? Chevron down icon Chevron up icon

Customs duty are charges levied on goods when they cross international borders. It is a tax that is imposed on imported goods. These duties are charged by special authorities and bodies created by local governments and are meant to protect local industries, economies, and businesses.

Do I have to pay customs charges for the print book order? Chevron down icon Chevron up icon

The orders shipped to the countries that are listed under EU27 will not bear custom charges. They are paid by Packt as part of the order.

List of EU27 countries: www.gov.uk/eu-eea:

A custom duty or localized taxes may be applicable on the shipment and would be charged by the recipient country outside of the EU27 which should be paid by the customer and these duties are not included in the shipping charges been charged on the order.

How do I know my custom duty charges? Chevron down icon Chevron up icon

The amount of duty payable varies greatly depending on the imported goods, the country of origin and several other factors like the total invoice amount or dimensions like weight, and other such criteria applicable in your country.

For example:

  • If you live in Mexico, and the declared value of your ordered items is over $ 50, for you to receive a package, you will have to pay additional import tax of 19% which will be $ 9.50 to the courier service.
  • Whereas if you live in Turkey, and the declared value of your ordered items is over € 22, for you to receive a package, you will have to pay additional import tax of 18% which will be € 3.96 to the courier service.
How can I cancel my order? Chevron down icon Chevron up icon

Cancellation Policy for Published Printed Books:

You can cancel any order within 1 hour of placing the order. Simply contact customercare@packt.com with your order details or payment transaction id. If your order has already started the shipment process, we will do our best to stop it. However, if it is already on the way to you then when you receive it, you can contact us at customercare@packt.com using the returns and refund process.

Please understand that Packt Publishing cannot provide refunds or cancel any order except for the cases described in our Return Policy (i.e. Packt Publishing agrees to replace your printed book because it arrives damaged or material defect in book), Packt Publishing will not accept returns.

What is your returns and refunds policy? Chevron down icon Chevron up icon

Return Policy:

We want you to be happy with your purchase from Packtpub.com. We will not hassle you with returning print books to us. If the print book you receive from us is incorrect, damaged, doesn't work or is unacceptably late, please contact Customer Relations Team on customercare@packt.com with the order number and issue details as explained below:

  1. If you ordered (eBook, Video or Print Book) incorrectly or accidentally, please contact Customer Relations Team on customercare@packt.com within one hour of placing the order and we will replace/refund you the item cost.
  2. Sadly, if your eBook or Video file is faulty or a fault occurs during the eBook or Video being made available to you, i.e. during download then you should contact Customer Relations Team within 14 days of purchase on customercare@packt.com who will be able to resolve this issue for you.
  3. You will have a choice of replacement or refund of the problem items.(damaged, defective or incorrect)
  4. Once Customer Care Team confirms that you will be refunded, you should receive the refund within 10 to 12 working days.
  5. If you are only requesting a refund of one book from a multiple order, then we will refund you the appropriate single item.
  6. Where the items were shipped under a free shipping offer, there will be no shipping costs to refund.

On the off chance your printed book arrives damaged, with book material defect, contact our Customer Relation Team on customercare@packt.com within 14 days of receipt of the book with appropriate evidence of damage and we will work with you to secure a replacement copy, if necessary. Please note that each printed book you order from us is individually made by Packt's professional book-printing partner which is on a print-on-demand basis.

What tax is charged? Chevron down icon Chevron up icon

Currently, no tax is charged on the purchase of any print book (subject to change based on the laws and regulations). A localized VAT fee is charged only to our European and UK customers on eBooks, Video and subscriptions that they buy. GST is charged to Indian customers for eBooks and video purchases.

What payment methods can I use? Chevron down icon Chevron up icon

You can pay with the following card types:

  1. Visa Debit
  2. Visa Credit
  3. MasterCard
  4. PayPal
What is the delivery time and cost of print books? Chevron down icon Chevron up icon

Shipping Details

USA:

'

Economy: Delivery to most addresses in the US within 10-15 business days

Premium: Trackable Delivery to most addresses in the US within 3-8 business days

UK:

Economy: Delivery to most addresses in the U.K. within 7-9 business days.
Shipments are not trackable

Premium: Trackable delivery to most addresses in the U.K. within 3-4 business days!
Add one extra business day for deliveries to Northern Ireland and Scottish Highlands and islands

EU:

Premium: Trackable delivery to most EU destinations within 4-9 business days.

Australia:

Economy: Can deliver to P. O. Boxes and private residences.
Trackable service with delivery to addresses in Australia only.
Delivery time ranges from 7-9 business days for VIC and 8-10 business days for Interstate metro
Delivery time is up to 15 business days for remote areas of WA, NT & QLD.

Premium: Delivery to addresses in Australia only
Trackable delivery to most P. O. Boxes and private residences in Australia within 4-5 days based on the distance to a destination following dispatch.

India:

Premium: Delivery to most Indian addresses within 5-6 business days

Rest of the World:

Premium: Countries in the American continent: Trackable delivery to most countries within 4-7 business days

Asia:

Premium: Delivery to most Asian addresses within 5-9 business days

Disclaimer:
All orders received before 5 PM U.K time would start printing from the next business day. So the estimated delivery times start from the next day as well. Orders received after 5 PM U.K time (in our internal systems) on a business day or anytime on the weekend will begin printing the second to next business day. For example, an order placed at 11 AM today will begin printing tomorrow, whereas an order placed at 9 PM tonight will begin printing the day after tomorrow.


Unfortunately, due to several restrictions, we are unable to ship to the following countries:

  1. Afghanistan
  2. American Samoa
  3. Belarus
  4. Brunei Darussalam
  5. Central African Republic
  6. The Democratic Republic of Congo
  7. Eritrea
  8. Guinea-bissau
  9. Iran
  10. Lebanon
  11. Libiya Arab Jamahriya
  12. Somalia
  13. Sudan
  14. Russian Federation
  15. Syrian Arab Republic
  16. Ukraine
  17. Venezuela