TIM-8320

Siegel, C. A., & Sweeney, M. (2020). Cyber strategy: Risk-driven security and resiliency. Auerbach Publications.
This e-book describes cybersecurity strategies using several of the industry-standard frameworks discussed in this class. Some of the topics detailed are cyber risks and controls, current and target statement assessments, and measuring cybersecurity plan performance. This e-book is a valuable tool to have as a reference and specific chapters are valuable resources for the weekly assignments.

Wilson, M., & Hash, J. (2003, October). Building an information technology awareness and training program. NIST: National Institute of Standards and Technology.
This publication covers the components needed to design an effective awareness, training, and education program.

Miller, D. R. [Author]. (2016). CISSP certification training: Domain 7 [Film]. Infinite Skills 2016.
A reminder to complete the O’Reilly registration up to Step 5 where you get an email that will allow your browser to keep your password, solving future access limitations.
A video overview of the CISSP Domain 7. You can find the content of this course within the chapter. Use the menu on the right of the screen to focus on specific areas. Do not skip Incidents.

Greene, S. [Author]. (2018). CISSP second edition [Video Series]. Pearson IT Certification 2018.
An alternative video overview of Domain 7. You can find the content of this course within the chapter. Use the menu on the right of the screen to focus on specific areas. Do not skip Incidents.

Gorecki, A. (2020). Cyber breach response that actually works. Wiley Press.
Read Chapter 2 – Building a Cybersecurity Incident Response Team.
This chapter discusses the evolving threat landscape, defines a cyber breach response and related drivers, and how to create a strategy for incident response management.

Gorecki, A. (2020). Cyber breach response that actually works. Wiley Press.
Read Chapter 3 – Technology Considerations in Cyber Breach Investigations.
This chapter discusses the various tools and techniques used to cyber breach investigations.

Gorecki, A. (2020). Cyber breach response that actually works. Wiley Press.
Read Chapter 4 – Crafting an Incident Response Plan.
This chapter explains the NIST incident response lifecycle, including preparation, detection & analysis, containment eradication and recovery, and post-incident activity. Crafting an incidence response playbook is also discussed.

Johansen. G. (2020). Digital Forensics and Incident Response (2nd ed.). Packt Publishing.
Read all parts in Section 1: Foundations of Incident Response and Digital Forensics.
This section covers a wide range of topics, including the incidence response process, the incident response framework, and post-incident recovery strategies.

Gorecki, A. (2020). Cyber breach response that actually works. Wiley Press.
Read Chapter 5 – Investigating and Remediating Cyber Breaches.
This chapter discusses how to engage in investigation, conduct an analysis, determine evidence types, and remediate incidences.

Gorecki, A. (2020). Cyber breach response that actually works. Wiley Press.
Read Chapter 6 – Legal and Regulatory Considerations in Cyber Breach Response.
This chapter explains the implications of breaches from a legal perspective, how to handle forensic evidence, and how to establish a chain of custody.

Wallace, M., & Webber, L. (2017). The disaster recovery handbook (3rd ed.). AMACOM.
Read Chapter 4 – Selecting a Strategy.
This chapter discusses how to use the information gathered in the business impact analysis and risk assessment to inform the strategy selection process.

Wallace, M., & Webber, L. (2017). The disaster recovery handbook (3rd ed.). AMACOM.
Read Chapter 5 – Building an Interim Plan.
This chapter discusses the importance of creating action items right after the critical processes have been identified in the business impact analysis.

Viira, T. (2018). Lessons learned: Critical information infrastructure protection – how to protect critical information infrastructure. IT Governance Publishing.
Read Chapter 14 – Organization Required to Protect Critical Information Infrastructure.
This chapter discusses the importance of a holistic approach to information systems protection within and outside the organization.

Viira, T. (2018). Lessons learned: Critical information infrastructure protection – how to protect critical information infrastructure. IT Governance Publishing.
Read Chapter 15 – NIS Directive.
This chapter explains the regulations to improve the cyber resilience of critical infrastructure services.

Viira, T. (2018). Lessons learned: Critical information infrastructure protection – how to protect critical information infrastructure. IT Governance Publishing.
Read Chapter 16 – Assessment of the Security Level.
This chapter explains the process of assessing the security level of the information systems in the organization.

Viira, T. (2018). Lessons learned: Critical information infrastructure protection – how to protect critical information infrastructure. IT Governance Publishing.
Read Chapter 17 – Network Scanning.
This chapter explains the importance of periodic network scanning in the organization.

Viira, T. (2018). Lessons learned: Critical information infrastructure protection – how to protect critical information infrastructure . IT Governance Publishing.
Read Chapter 18 – Business Continuity Plan and Testing.
This chapter explains the process of creating and testing a business continuity plan in the organization.

Mariscotti, E. E. (2020). Corporate risks and leadership. Productivity Press.
Read Chapter 8 – The Challenges of Legal and Technological Changes.
This chapter discusses the importance of organizations learning to embrace challenges of legal and technological change.

Mariscotti, E. E. (2020). Corporate risks and leadership. Productivity Press.
Read Chapter 10 – Be a Proactive Leader.
This chapter discusses the importance of leadership in risk mitigation.

Engemann, K. (2018). The Routledge companion to risk, crisis, and security in business. Routledge.
Read Chapter 2 – The Evolution of Risk Management Thinking in Organizations.
This chapter details the etymology of risk and how organizations have evolved to be more proactive in managing risk.

Engemann, K. (2018). The Routledge companion to risk, crisis, and security in business. Routledge.
Read Chapter 13 – Self-Organization and Its Role in Building Disaster Resilience.
This chapter discusses the importance of leadership in creating disaster resilience and effective responses to risk and uncertainty in the organization.

Engemann, K. (2018). The Routledge companion to risk, crisis, and security in business. Routledge.
Read Chapter 27 – Leading Through Uncertainty.
This chapter discusses the relevance of leading and managing through all phases of the business continuity management plan. The chain of authority, crisis management process, and risk management governance are some of the topics covered.

Wallace, M., & Webber, L. (2017). The disaster recovery handbook (3rd ed.). AMACOM.
Read Chapter 13 – Testing Your Plans: Test, Test, Test.
This chapter discusses the benefits of plan testing, including determining if the true length of recovery time aligns with the desired company recovery time objective (RTO).

Wallace, M., & Webber, L. (2017). The disaster recovery handbook (3rd ed.). AMACOM.
Read Chapter 19 – Information Security Response: Always Vigilant.
This chapter discusses the need to engage in ongoing information security response to effectively manage information security risks.

Cloutier, C., & Ravasi, D. (2020). Identity trajectories: Explaining long-term patterns of continuity and change in organizational identities. Academy of Management Journal, 63(4), 1196-1235.
This journal article details a study that investigated long-term patterns of continuity and change in organizational identities as both relate to a holistic organizational response to decision-making, continuity, and resiliency.

Anson, S. (2020). Applied incident response. Apress.
Read Chapter 13 – Continuous Improvement.
This chapter details the importance of engaging in the continuous improvement process for incident response management.

Kenyon, B. (2019). IS 27001 controls - A guide to implementing and auditing. IT Governance Publishing.
Read Chapter 2 – Implementing and Auditing ISMS Control Objectives and Controls.
This chapter explains how to incorporate control objectives and requirements in the practice of information security management.

Schnepp, R., Vidal, R., & Hawley, C. (2017). Incidence management for operations. O'Reilly Media, Inc.
Read Chapter 6 – After Action Review (AAR).
This chapter describes the process of deconstructing an incident as a post mortem review to inform the feedback loop.