97 Things Every Information Security Professional Should Know

Preface

An information security professional or “InfoSec Pro” is responsible for protecting IT infrastructure including but not limited to devices, networks, software, and applications. InfoSec Pros are trained to find exploitable weaknesses and fix any potential issues to mitigate and minimize the risk of an attack.

However, the information security field is vast, and navigating a career as someone new or looking to explore other opportunities in the space can feel daunting and uncertain. From understanding enterprise operations, security engineering, and the cloud, to learning how to navigate the number of situations or blockers—these are some of the things you will encounter throughout your career in this industry.

When I was approached to create this book, I envisioned a guide full of practical and actionable advice to better help practitioners navigate the space. Whether you are curious and entry-level or have decades of experience, this book intends to help guide you through your journey by providing practical and technical knowledge you can put into practice starting today. It contains a collection of articles from a global set of information security practitioners, and provides readers with the best practices on solving shared security issues, valuable advice for navigating careers within this industry, and tools needed to solve everyday problems.

We hope that this book will help you better understand and put to practice:

• How to get started, whether you are new to the ...