Security operations departments are growing in importance and recognition; they are responsible for the secure day to day running of an organisation's network, endpoint, application, identity and physical security controls.
This book walks you through how to establish and grow a strong security operations team, including hiring the right people, knowing when to build a tool rather than buy, and crafting procedures that allow the team to detect and respond to a wide variety of security threats.
Arvustused
'Mike masterfully combines a coverage of the fundamental building blocks of a security operations program with the tactical insight he has gained from his experience in the trenches. This book holds valuable insights for both the budding security engineer and the seasoned veteran.' -- Chad Butler * Director - Application Security, Disney * 'A good read and food for thought for Security Operations professionals.' -- David King * Regional Information Security Officer EMEA, Omnicom Media Group * 'Beginners and veterans alike will learn from a professional who has clearly earned his wisdom. This sensible and practical guide to security operations is on my desktop, not in my bookshelf.' -- Jeff Costlow * Deputy CISO, ExtraHop Networks *
Introduction
Establishing A Security Operations Team
Monitoring Networks and Clouds
Managing Endpoint Devices
Protecting Data
Identity and Access Management
Incident Detection and Response
Vulnerability Management
Building Relationships and Trust
Beyond the Enterprise
Red Teaming and Threat Hunting
Building Bespoke Tools
Physical Security
Conclusion
Mike Sheward is Chief Information Security Officer at Amperity and runs a digital investigation consultancy, Secure Being LLC. He has worked in information security in the UK and USA. Mike has written two books, 'Digital Forensic Diaries' and 'Hands-On Incident Response and Digital Forensics.'
