Information Security Incident and Data Breach Management : A Step-by-Step Approach / by John Kyriazoglou.

Format:

Book

Author/Creator:

Kyriazoglou, John.

Series:

Professional and Applied Computing Series

Language:

English

Subjects (All):

Data protection.

Data and Information Security.

Local Subjects:

Data and Information Security.

Physical Description:

1 online resource (164 pages)

Edition:

1st ed. 2024.

Place of Publication:

Berkeley, CA : Apress : Imprint: Apress, 2024.

Summary:

In today's digital landscape, safeguarding sensitive information is paramount. This book offers a comprehensive roadmap for managing and mitigating the impact of security incidents and data breaches. This essential guide goes beyond the basics, providing expert insights and strategies to help organizations of all sizes navigate the complexities of cybersecurity. With seven in-depth chapters and 10 appendices, this book covers everything from defining information security incidents and data breaches to understanding key privacy regulations such as GDPR and LGPD. You'll learn a practical, step-by-step approach to incident response, including how to assess and improve your organization's security posture. The book contains a well-tested and practical information security incident and breach management approach to manage information security incidents and data privacy breaches in four phases: Security and Breach Obligations and Requirements Comprehension; Security and Privacy Framework Assurance; Security Incident and Data Breach Response Management; and Security and Breach Response Process Evaluation. Knowing how to handle such security and breach issues will avoid compliance and sanctions to organizations of all types and protect the company’s reputation and brand name. What You Will Learn Identify and manage information security incidents and data breaches more effectively Understand the importance of incident response in avoiding compliance issues, sanctions, and reputational damage Review case studies and examples that illustrate best practices and common pitfalls in incident response and data breach management Benefit from a well-tested approach that goes beyond the NIST 800-61 standard, aligning with the international information security standard ISO 27001:2022 .

Contents:

Chapter 1. Information Security and Breach Obligations and Definitions

Chapter 2. Summarizing ISO 27K and Major Privacy Regulations

Chapter 3: Information Security and Data Breach Response Framework

Chapter 4. Managing Information Security Incidents

Chapter 5. Investigating Cyber Crimes

Chapter 6. Managing Data Breaches

Chapter 7. Improving Security Incident and Data Breach Responses

Appendix 1: Threat Intelligence Policy

Appendix 2: IT Logging Policy

Appendix 3: Minimum IT Security and Privacy Controls

Appendix 4: Staff Education and Training Policy

Appendix 5: IT and Digital Skills Checklist

Appendix 6: Glossary of IT Concepts and Terms

Appendix 7: Privacy Awareness, Communication and Training Plan

Appendix 8: Information Security Incident Reporting Policy

Appendix 9: Information Security Incident Reporting Form

Appendix 10: Data Breach Reporting Form.

Notes:

Description based on publisher supplied metadata and other sources.

ISBN:

979-88-6880-870-8

OCLC:

1463796152