book

Cyber Security, 2nd Edition

by David Sutton

December 2022

Intermediate to advanced

222 pages

7h 19m

English

BCS, The Chartered Institute for IT

Read now

Unlock full access

BackgroundThe expectations of users and organisationsCyber security in the wider context
Some thoughts on social, political and other issuesCybercrimeCyber harassment or cyber bullyingCyber warfareCyber surveillanceWhy we should careWhat makes cyber security difficult?
Individual targetsBusiness targetsCritical national infrastructure (CNI) targetsBuilding targetsAcademia and research targetsManufacturing and industry targets
Cyber vulnerabilitiesCyber impacts
Types of attackerMotives: what drives an attackerMeansCyber-attack methodsTypes of cyber-attack and attack vectorsThe risks of conducting a cyber-attack
A general view of riskAssetsThreatsVulnerabilitiesLikelihood or probabilityQualitative and quantitative assessmentsThe risk management process
FailuresBusiness continuityDisaster recovery
General security adviceTechnical security adviceMobile working
Security policies overviewDirective policiesAdministrative policiesCommunal policiesTechnical policies
AwarenessTraining
TrustInformation classificationProtection of shared informationAnonymisation of shared informationRoutes to information sharing
Cyber security standardsISO/IEC 27000 series standardsOther relevant ISO standardsBusiness continuity standardsNational Institute of Standards and Technology (NIST) standards
General cyber security adviceUK government cyber security advice
UK LawEU Directives and Regulations
Generic cyber security training and qualificationsSpecific cyber security training and qualifications
AbbreviationsGlossary

Content preview from Cyber Security, 2nd Edition

11 INFORMATION SHARING

In this chapter, we will take a look at one of the methods of reducing our cyber security risks – sharing information about threats and vulnerabilities.

It’s worth bearing in mind that knowledge of vulnerabilities may lead an attacker to be able to mount a successful attack, but it’s only by careful sharing of information that security can be improved. This dichotomy can lead to tensions in the cyber security world, and the occasional holding back of information regarding some vulnerabilities.

The organisations described throughout this chapter all have excellent websites, so rather than repeating their content, a brief description of their activities has been provided with links to the appropriate web pages.

The most ...