Cyber resilience - Defence-in-depth principles

Table of contents

1. Cover
2. Title
3. Copyright
4. Contents
5. About the author
6. Acknowledgements
7. Introduction
8. Part 1: Security principles
   1. Chapter 1: The cyber threat landscape
   2. Chapter 2: Legal and contractual requirements
   3. Chapter 3: Key terms and concepts
   4. Chapter 4: Managing the risks
   5. Chapter 5: Three security pillars
   6. Chapter 6: Layers of defence in depth
   7. Chapter 7: Mapping the layers against the Part 2 reference controls
   8. Chapter 8: Implementation tips
9. Part 2: Reference controls
   1. Chapter 9: Asset management
   2. Chapter 10: Board-level commitment and involvement
   3. Chapter 11: Business continuity management
   4. Chapter 12: Configuration and patch management
   5. Chapter 13: Continual improvement process
   6. Chapter 14: Encryption
   7. Chapter 15: External certification/validation
   8. Chapter 16: Identity and access control
   9. Chapter 17: Incident response management
   10. Chapter 18: Internal audits
   11. Chapter 19: Malware protection
   12. Chapter 20: Network and communications security
   13. Chapter 21: Physical and environmental security
   14. Chapter 22: Security monitoring
   15. Chapter 23: Security policies
   16. Chapter 24: Staff training and awareness
   17. Chapter 25: Supply chain security
   18. Chapter 26: System security
   19. Chapter 27: Vulnerability scanning and penetration testing
10. GRC International Group PLC resources