TIM-8365

Girling, P. X. (2022, February). Operational risk management (2nd ed.). Wiley.
Read Chapter 6: Policies and Procedures.
This chapter explores the important role of strong policies and procedures in an effective operational risk framework. It also considers the role of standards and guidelines documents. Example content is provided for an operational risk policy and samples from procedures, standards, and guidelines.

Muniz, J., Lakhani, A., Santos, O., & Frost, M. (2021, April). The modern security operations center. Addison-Wesley Professional.
Recommended Reading - Chapter 6: Reducing Risk and Exceeding Compliance.
This chapter focuses on various forms of compliance. Compliance by definition is to meet governing regulatory or contractual requirements. Requirements can come from an organization’s leadership, such as a corporate-mandated policy, which would be considered a policy based on corporate compliance. Another possible requirement is meeting a legal obligation, which would be government-based regulatory or statutory compliance.

Ozkaya, E., & Aslaner, M. (2019, January). Hands-on cybersecurity for finance. Packt Publishing.
This book explores some of the most important services and technologies currently at risk from cyber threats and describes specific technologies and threats based on case studies and real-life scenarios.