TIM-8365

Girling, P. X. (2022, February). Operational risk management (2nd ed). Wiley.
Read Chapter 15: Reputational and Operational Risk.
This chapter describes reputational risk and the ways that an operational risk framework can be leveraged to help identify, assess, control, and mitigate reputational risk in worldwide markets.

Blum, D. (2020, August). Rational cybersecurity for business: The security leaders' guide to business alignment. Apress.
This book explores six priority areas to focus on to maximize the effectiveness of the cybersecurity program: risk management, control baseline, security culture, IT rationalization, access control, and cyber-resilience.

National Institute of Standards and Technology (n.d.). National vulnerability database.
The NVD is the U.S. government repository of standards-based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables the automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, misconfigurations, product names, and impact metrics.

Givens, A. D., Busch, N. E., & Bersin, A. D. (2018). Going global: The international dimensions of U.S. homeland security policy. Journal of Strategic Security, 11(3), 1–34. https://doi.org/10.5038/1944-0472.11.3.1689
This journal article explores evidence from the homeland security sub-fields of border security, counterterrorism, cybersecurity, public health, and disaster management to show that U.S. homeland security policy is now inherently transnational and therefore best analyzed and understood by taking a broader, global perspective.