The Cyber Security Body of Knowledge
Awais Rashid, Howard Chivers, Emil Lupu, Andrew Martin, Steve Schneider
The reference map of the whole discipline, organized into nineteen knowledge areas written by specialists in each one, from risk management and human factors to cryptography, malware, forensics, network security and hardware. Over a thousand pages, so treat it as the book you keep returning to rather than read straight through.
Loading the book...
Keep reading
-
Next in this topic
The NIST Cybersecurity Framework (CSF) 2.0The framework most security programs are now measured against, built around six functions: govern, identify, protect, detect, respond and recover. It explains how to build an organizational profile, set target outcomes, and use tiers to describe how mature your practices actually are.
Verified PDF · Secure download - Guide for Conducting Risk Assessments
A step by step method for assessing risk, covering how to prepare an assessment, identify threat sources and events, determine likelihood and impact, and communicate results so decisions actually get made. Includes the full set of tables and rating scales the process depends on.
Verified PDF · Secure download - Risk Management Framework for Information Systems and Organizations
The seven step process for managing security and privacy risk across a system life cycle: prepare, categorize, select, implement, assess, authorize and monitor. It also shows how the framework connects to the Cybersecurity Framework and to supply chain risk management.
Verified PDF · Secure download - Cybersecurity: Our Digital Anchor
A policy oriented report that maps cyber security as a whole system, covering the threat landscape, digital sovereignty, standards and certification, and the research priorities that shape security governance. Useful for understanding how risk is managed at institutional scale rather than at the level of a single machine.
Verified PDF · Secure download - Guide to Integrating Forensic Techniques into Incident Response
A practical forensics manual built on a four phase process of collection, examination, analysis and reporting, applied to data files, operating systems, network traffic and applications. It also covers evidence integrity, tool selection and the policy questions that need answers before an incident starts.
Verified PDF · Secure download
