Cyber Risk Management: Prioritize Threats, Identify Vulnerabilities and Apply Controls

by Christopher J Hodson

Overview

How can you manage the complex threats that can cause financial, operational and reputational damage to the business? This practical guide shows how to implement a successful cyber security programme.

The second edition of Cyber Risk Management covers the latest developments in cyber security for those responsible for managing threat events, vulnerabilities and controls. These include the impact of Web3 and the metaverse on cyber security, supply-chain security in the gig economy and exploration of the global, macroeconomic conditions that affect strategies. It explains how COVID-19 and remote working changed the cybersecurity landscape.

Cyber Risk Management presents a data-centric approach to cyber risk management based on business impact assessments, data classification, data flow modelling and assessing return on investment. It covers pressing developments in artificial intelligence, machine learning, big data and cloud mobility, and includes advice on dealing with malware, data leakage, insider threat and Denial-of-Service. With analysis on the innate human factors affecting cyber risk and awareness and the importance of communicating security effectively, this book is essential reading for all risk and cybersecurity professionals.

Product Details

ISBN-13:	9781398613492
Publisher:	Kogan Page, Ltd.
Publication date:	02/27/2024
Edition description:	2nd ed.
Pages:	448
Product dimensions:	6.14(w) x 9.21(h) x 0.33(d)

About the Author

Christopher J Hodson is Chief Security Officer for Cyberhaven where he oversees all facets of security to protect Cyberhaven customers and employees, including cloud and application security, security operations, and risk management. In addition, Chris serves as a board advisor at the workforce development platform, Cybrary, and is a fellow of the Chartered Institute of Information Security. He has previously held CISO positions with Contentful, Zscaler, and Tanium. He is a guest lecturer at Royal Holloway, University of London where he also holds a master's degree in computer and information systems security.

Table of Contents

* Section - PART ONE: Contextualizing cybersecurity risk; ** Chapter - 01: Why now? The only constant is change; ** Chapter - 02: Technologies and security challenges; ** Chapter - 03: Data breaches; * Section - PART TWO: Cybersecurity programme management; ** Chapter - 04: What are cybersecurity and cybercrime?; ** Chapter - 05: Establishing a cybersecurity programme; * Section - PART THREE: Actors, events and vulnerabilities; ** Chapter - 06: Threat actors; ** Chapter - 07: Threat events; ** Chapter - 08: Vulnerabilities; ** Chapter - 09: Controls; * Section - PART FOUR: Conclusion: the cybersecurity risk equation explained; ** Chapter - 10: Cyber risk management: a conclusion;

Editorial Reviews

"This is an excellent book. Christopher Hodson writes as he speaks, with passion and clear understanding of a profession of which he has extensive experience and loves. Cyber Risk Management is extremely well researched and provides the reader with a simple-to-follow, guided journey through the cyber issues we face and the approaches we should be taking to cope with them. Hodson's pragmatic style demystifies complex issues making this a great read for both experienced security professionals and non-professionals alike. This is required reading for anyone who wants to intelligently manage cyber risk, whether a CISO, CFO or CEO!"

Amanda Finch

"Cyber Risk Management serves as both a valuable playbook for security leaders building out their programs, and a much-needed reference for their key business and technical partners across the organization. Christopher Hodson reinforces and enriches each topic by drawing upon a diverse set of examples from emerging technologies, geopolitical and regulatory forces, historical events, and noteworthy incidents."-- "Ryan Kazanciyan, CISO, Wiz"

"

In the fast-paced world of cybersecurity, Cyber Risk Management is a guiding light. This book combines expertise with a friendly touch, making it easy for readers to tackle security challenges, no matter their technical background. Christopher Hodson has a knack for unravelling cybersecurity jargon and presenting complex ideas in a way that anyone can understand. He effortlessly blends theory with practical examples, ensuring readers not only grasp the basics but also gain insights into real-world scenarios.

Throughout the book, Hodson expertly covers the essentials of cybersecurity risk management, offering a solid framework for prioritizing threats, spotting vulnerabilities, and implementing effective controls. His conversational tone and patient approach make this book a valuable resource for both seasoned practitioners and newcomers.

"-- "Dana Wolf, CEO and Co-Founder, YeshID"

"Everyone in the cybersecurity universe is experiencing a pace of change and complexity which is simply unprecedented. Christopher Hodson has captured our universe as it is today. He covers the meteoric rise of LLMs and changes in social appetite to technology, with the keen insight, deep expertise and humour that we expect from him. He gives us a reason to feel optimistic about these changes. Whilst so much is changing, the importance of understanding cybersecurity remains paramount and constant."-- "Phil Owen MBE, VP/Chief Security Officer, Telus Health"

"This is an excellent book. Christopher Hodson writes as he speaks, with passion and clear understanding of a profession of which he has extensive experience and loves. Cyber Risk Management is extremely well researched and provides the reader with a simple-to-follow, guided journey through the cyber issues we face and the approaches we should be taking to cope with them. Hodson's pragmatic style demystifies complex issues making this a great read for both experienced security professionals and non-professionals alike. This is required reading for anyone who wants to intelligently manage cyber risk, whether a CISO, CFO or CEO!"-- "Amanda Finch, CEO, Chartered Institute of Security Professionals"

From the Publisher

"Everyone in the cybersecurity universe is experiencing a pace of change and complexity which is simply unprecedented. Christopher Hodson has captured our universe as it is today. He covers the meteoric rise of LLMs and changes in social appetite to technology, with the keen insight, deep expertise and humour that we expect from him. He gives us a reason to feel optimistic about these changes. Whilst so much is changing, the importance of understanding cybersecurity remains paramount and constant."

Phil Owen MBE

"In the fast-paced world of cybersecurity, Cyber Risk Management is a guiding light. This book combines expertise with a friendly touch, making it easy for readers to tackle security challenges, no matter their technical background. Christopher Hodson has a knack for unravelling cybersecurity jargon and presenting complex ideas in a way that anyone can understand. He effortlessly blends theory with practical examples, ensuring readers not only grasp the basics but also gain insights into real-world scenarios.

Throughout the book, Hodson expertly covers the essentials of cybersecurity risk management, offering a solid framework for prioritizing threats, spotting vulnerabilities, and implementing effective controls. His conversational tone and patient approach make this book a valuable resource for both seasoned practitioners and newcomers.

"

Dana Wolf

"Cyber Risk Management serves as both a valuable playbook for security leaders building out their programs, and a much-needed reference for their key business and technical partners across the organization. Christopher Hodson reinforces and enriches each topic by drawing upon a diverse set of examples from emerging technologies, geopolitical and regulatory forces, historical events, and noteworthy incidents."

Ryan Kazanciyan

"An approachable resource that combines Chris's considerable business acumen and life experiences with risk management approaches and frameworks. This book will help executives and techies alike find common ground as they handle today's cybersecurity challenges."

James Stanger

"A thoroughly enjoyable and insightful book that provides a well-rounded perspective into the interconnected world of cyber-risk management. The breadth of knowledge and the wonderful similes used to breakdown complex ideas show that Chris clearly knows his stuff!"

Atif Rafiq

"Written in an extremely accessible style and covering issues of vital importance to today's organisations, Cyber Risk Management offers a valuable resource for a managers and scholars looking to understand more about the topic, as well as for cyber security professionals seeking an experience-based account of the issues they are likely to be facing."

Steven Furnell

"One of the most informative books currently on the market that demystifies the risk management process surrounding cyber security. Chris uses up-to-date case studies to highlight the most important aspects of cyber risk, informing the reader of current best practices within industry, how to implement it within your company and ultimately how you can keep your business safe against the growing number of cyber threats out there."

Tom Huckle

"The approach Chris suggests is sensible, methodical, and pragmatic, everything you want when running security for a business."

James Freestone