Chapter 9Afterword

Now, you've read all about my 8 Steps to Better Security. This is my methodology to make sure your business is off to a good start when it comes to thriving in the evolving cyber threat landscape.

Let's review the most important ideas in each of the eight steps. I also recommend other books to further your understanding of the topics I've covered.

Step 1

The foundation of being a cyber-resilient business is to foster a strong security culture. This is where you must always start. Cybersecurity is primarily a social phenomenon, contrary to popular belief. You absolutely must have people who understand how to securely deploy, implement, configure, and maintain computer technology. Having people with technical skills on your security team is important, but all the information technology and computer science skills in the world are useless without the right attitude and culture to support their proper use.

Your company's security culture is the way everyone in your organization behaves relative to cybersecurity. It's something that must be developed and nurtured over time. Like everything else in cybersecurity, it's not something you can set and forget (like a cheesy infomercial). Security is a process. Think of it as a houseplant that requires everyday care.

Let's summarize the ideas I introduced in step 1.

The Most Notorious Cyberattacker Was Actually a Con Man

Kevin Mitnick is famous for his cyberattacks in the 1980s and 1990s. He is perhaps the first individual ...

Get 8 Steps to Better Security now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.