http://www.loc.gov/mods/v3 http://www.loc.gov/standards/mods/v3/mods-3-2.xsd
Uncover the Secrets of Blue Teams to Combat Cyber Threats in Your Organization
This book will help you understand how a blue team is formed and why it is crucial for businesses. You'll learn different security controls, such as preventive and defensive controls, and become equipped to set up a blue team from scratch.
Intro -- Preface -- Part 1: Establishing the Blue -- Chapter 1: Establishing a Defense Program -- How do organizations benefit from implementing the blue teaming approach? -- Risk assessment -- Monitoring and surveillance -- Security controls -- Reporting and recommendation to management -- A blue team's composition -- Analysts -- Incident responder -- Threat hunter -- Security consultant -- Security administrator -- Identity and Access Management (IAM) administrator -- Compliance analyst -- Red team -- Purple team -- Cyber threat intelligence -- Skills required to be in a blue team
Eager to learn and detail-oriented -- In-depth knowledge of networks and systems -- Outside-the-box and innovative thinking -- Ability to cross conventional barriers to perform tasks -- Academics, qualifications, and certifications -- Talent development and retention -- Cyber labs -- Capture-the-Flag and hackathons -- Research and development projects -- Community outreach -- Mentoring -- Continuous unhindered learning -- Summary -- Chapter 2: Managing a Defense Security Team -- Why must organizations consider metricizing cybersecurity? -- Blue team KRIs
How does a blue team initiate designing KRIs for their team? -- Selecting essential cybersecurity metrics -- Why and how organizations can automate this process -- What pitfalls to avoid when automating the workflows of the blue team -- Automating how KRIs are collected and presented -- Summary -- Chapter 3: Risk Assessment -- Following the NIST methodology -- NIST risk assessment methodology -- Asset inventory -- Risk management methods -- Threat identification -- Risk calculation -- Risk management responsibilities -- Summary -- References -- Chapter 4: Blue Team Operations
Understanding defense strategy -- Blue team operations -- infrastructure -- Blue team operations -- applications -- Blue team operations -- systems -- Blue team operations -- endpoints -- Blue team operations -- cloud -- Defense planning against insiders -- Responsibilities in blue team operations -- Summary -- Chapter 5: Threats -- What are cyber threats? -- The Cyber Kill Chain -- Phase 1 -- reconnaissance -- Phase 2 -- weaponization -- Phase 3 -- delivery -- Phase 4 -- exploitation -- Phase 5 -- installation -- Phase 6 -- command and control -- Phase 7 -- actions on objective -- Internal attacks
Different types of cyber threat actors -- Impacts of cybercrime -- An approach to security that is proactive rather than reactive -- Summary -- Chapter 6: Governance, Compliance, Regulations, and Best Practices -- Definition of stakeholders and their needs -- Building risk indicators -- Compliance needs and the identification of compliance requirements -- Assurance of compliance and the right level of governance -- Summary -- Part 2: Controlling the Fray -- What are security controls? -- Preventive controls -- Detective controls -- Deterrent controls -- Compensating controls
Description based upon print version of record.
Birmingham : Packt Publishing, Limited,c2023