LibGuides: TIM-6715 V1: Week 1 Resources

Week 1 Resources

Pomerleau, P., & Lowery, D.L. (2020). Countering cyber threats to financial institutions: A private and public partnership approach to critical infrastructure protection (1st ed.). 9783030540548.

Read Chapter 1, Contemporary Cybersecurity in Our Daily Lives.

This chapter discusses the relevance of cybersecurity in our daily lives and the need to maintain a keen awareness of common cyberattack trends faced by an interconnected, “always-on” society.

To access the Redshelf book, click on the book link located in the Getting Started module or the Bookshelf link on the top navigation bar of the course.

Threat Modeling Explained: A Process for Anticipating Cyber Attacks
Frulinger, J. (2020, April 15). Understanding the frameworks, methodologies, and tools to help you identify, quantify, and prioritize the threats you face.
This article defines threat modeling, provides data flow diagram examples, and the steps used in applying the most common threat modeling methodologies.
SBS Cybersecurity – Importance of Data Flow Diagrams
SBS Security. (2018). Data Flow Diagrams 101.
This article details the FFIEC Cybersecurity Assessment Tool (CAT) requirement for data flow diagrams (DFDs) under Domain 4 (Vendor Management) and relevance to security auditing for financial institutions. The importance of documenting the information flow throughout the organization using a data flow diagram to identify data sets shared between systems, applications, and appropriate classification of data transmitted is described.

The resources below are highly suggested, optional readings that will help you with this week’s assignments.

Pomerleau, P., & Lowery, D.L. (2020). Countering cyber threats to financial institutions: A private and public partnership approach to critical infrastructure protection (1st ed.). 9783030540548.

Read Definitions of Key Terms (at the back of the book).

The Definitions of Key Terms is a master list of important terms and definitions associated with cybersecurity and the finance and banking industry, and the research topics covered in the textbook.

To access the Redshelf book, click on the book link located in the Getting Started module or the Bookshelf link on the top navigation bar of the course.

The Information Technology – Information Sharing and Analysis Center
The Information Technology Information Sharing and Analysis Center. (n.d.). In the news.
The IT-ISAC website is an officially sanctioned source of information for IT departments in important government and enterprises by the FBI, Critical Infrastructure areas defined by DHS, and InfraGard. Focus on the news articles listed at the top of the current year column to get the latest news in the field of cybersecurity. This website is a valuable tool as a reference.
Cyber Strategy: Risk-Driven Security and Resiliency
Carol A. Siegel, & Mark Sweeney. (2020). Cyber Strategy: Risk-Driven Security and Resiliency. Auerbach Publications.
This e-book describes cybersecurity strategies using several of industry-standard frameworks discussed in this class. Some of the topics detailed are cyber risks and controls, current and target statement assessments, and measuring cybersecurity plan performance. This e-book is a valuable tool to have as a reference and specific chapters are valuable resources for the weekly assignments.