TIM-6755 V1

National Institute of Standards and Technology (NIST). (2018, April 16). Framework for improving critical infrastructure cybersecurity.
This industry-recognized resource manual covers standards and best practices for managing critical aspects of infrastructure cybersecurity. The following sections in the Table of Contents are directly relevant: 1.0 Framework Introduction, 2.0 Framework Basics, 3.0 How to Use the Framework, and 4.0 Self-Assessing Cybersecurity Risk with the Framework. This framework is a valuable tool to have as a reference.

Andreasson, K. J. (2011). Cybersecurity: Public sector threats and responses. Taylor & Francis Group.
Read Chapter 12 – Beyond Public-Private Partnerships: Leadership Strategies for Securing Cyberspace. This chapter discusses the challenges present in building public-private partnerships around cybersecurity.

Digital Forensics and Incident Response - Second Edition. (2020). O’Reilly Online Learning.
Access this resource using the steps described here: https://ncu.libanswers.com/faq/333013
This e-book is an invaluable resource for learning techniques used in threat intelligence and incident response best practices. Specifically, Chapter 13 provides a sample MITRE ATT&CK threat hunt plan implementation in an easy-to-understand framework.

National Institute of Standards and Technology (NIST). (2018 April). Framework documents | NIST
This industry-recognized resource manual covers standards and best practices for managing critical aspects of infrastructure cybersecurity. This website is a valuable tool to have as a reference.

Siegel, C. A., & Sweeney, M. (2020). Cyber strategy: Risk-driven security and resiliency. Auerbach Publications.
This e-book describes cybersecurity strategies using several of industry-standard frameworks discussed in this class. Some of the topics detailed are cyber risks and controls, current and target statement assessments, and measuring cybersecurity plan performance. This e-book is a valuable tool to have as a reference and specific chapters are valuable resources for the weekly assignments.

Paul, J. A., & Zhang, M. (2021). Decision support model for cybersecurity risk planning: A two-stage stochastic programming framework featuring firms, government, and attacker. European Journal of Operational Research, 291(1), 349–364.
This journal article focuses on cybersecurity risk planning strategies used by the government and the need to allocate resources to adequately prevent, detect, and contain threats as a countermeasure.