Redefining Information Security

INDEX

NB: page numbers in italic indicate figures or tables

• Abrams, L 266

• actionable steps, security vision 191–92

  • clear roles and processes 199

  • communication channels 197–98

  • risk assessment 192–93

  • security decision-making process 194–96

  • security vision 193

  • stakeholders identification 196–97

• adaptive risk management 275

  • AI and ML 154

  • cloud-based security solutions 151–52

  • continuous improvement culture 153

  • cyber threat intelligence (CTI) 155–56

  • data sources 151

  • ‘defence-in-depth’ approach 152

  • DevSecOps and secure software development 156

  • ‘no-blame’ approach 153

  • organizational inertia 157–58

  • ransomware attack, likelihood/potential impact 152–53

  • regulation and law, aligning 160–61

  • security controls, flexible 151–52

  • technical hurdles 159–60