Information Security Program

CCISO Flash Cards are designed for rapid review and steady progress, one short session at a time. Use this book to: Drill CCISO terms, concepts, and leadership patterns through repetition Strengthen recall for governance, risk, and program management topics Practice the language used in executive-focused security questions Study in small windows without losing momentum Refresh quickly during the final stretch before exam day If you want a practical way to keep CCISO prep moving alongside a full schedule, these flashcards are built for daily use.

CISM questions are designed to test manager-level judgment. They often present realistic situations where multiple responses sound reasonable, and the difference between a pass and a frustrating miss comes down to priorities: what comes first, what should be formalized, who owns the decision, and what aligns best to governance and business objectives. CISM Flash Cards is built to train that thinking through repetition. This book includes 1,000 digital flash cards designed for daily drills and rapid review. The cards reinforce the language and core concepts across the four CISM domains: ...

Edward Snowden, the man who risked everything to expose the US government’s system of mass surveillance, reveals for the first time the story of his life, including how he helped to build that system and what motivated him to try to bring it down. In 2013, twenty-nine-year-old Edward Snowden...

NEW FOR 2026: A clearer, more practical way to prepare for the ISACA CISM exam. CISM covers a lot of ground, and the hardest part is often not memorizing terminology. It is understanding how governance, risk, security programs, and incident management work together from a management perspective. CISM Study Guide: Certified Information Security Manager, 2026 Edition was built for busy professionals who need focused explanations, practical examples, and exam-relevant guidance without unnecessary complexity. This newly updated 2026 edition organizes CISM concepts into clear, manageable lessons...

The CCISO for Busy People: The Busy Candidate’s Playbook for Passing the CCISO Exam is built for professionals who need to master executive-level security concepts without getting buried in disconnected terminology, endless checklists, or overly technical explanations. The Certified Chief Information Security Officer exam expects more than memorization. It tests whether you can recognize the real decision in a scenario, weigh risk and business constraints, understand governance and accountability, and select the most defensible leadership response. This book is designed to help you ...

Security Awareness programs have gone from an afterthought to a critical component of Information Security programs. Most large organizations now have one or more full-time employees dedicated to awareness and managing human risks. This book defines a common framework for building a broad awareness program using the Train, Reinforce, Assess and Manage (TRAM) model. It includes specific advice and examples for activities across the TRAM functions. This book is filled with examples of deliverables an awareness professional can leverage in their program. This book also provides logical ...

Cyber risk management is one of the most urgent issues facing enterprises today. This book presents a detailed framework for designing, developing, and implementing a cyber risk management program that addresses your company's specific needs. Ideal for corporate directors, senior executives, security risk practitioners, and auditors at many levels, this guide offers both the strategic insight and tactical guidance you're looking for.

De analista a líder: tu salto al nivel ejecutivo de la seguridad El examen CISM (Certified Information Security Manager) de ISACA no evalúa si sabes configurar un firewall ni si puedes escribir reglas de detección. Evalúa si puedes dirigir un programa de seguridad de la información alineado con la estrategia del negocio. Es la certificación que separa al técnico del gerente, al ingeniero del CISO. Y es, también, una de las certificaciones peor preparadas en español: la mayoría del material disponible traduce literalmente conceptos de gestión que en realidad requieren contexto, ...

"Stuxnet: The Silent Weapon" is a riveting exploration into the world of digital warfare, offering a comprehensive look at the infamous Stuxnet attack, a moment that redefined modern warfare. This book delves deep into the intricacies of the Stuxnet worm, the first known digital weapon to cause physical damage to a nation's critical infrastructure, marking a watershed moment in military history. Spanning over detailed chapters, the book begins by setting the stage with the discovery of Stuxnet, a sophisticated piece of malware that targeted Iran's Natanz nuclear facility. It unfolds the ...

Every organization today faces an ever-changing set of threats in this digital landscape. Understanding how to develop a functional information security program to protect your organization’s reputation and brand from being tarnished due to a breach of your company’s sensitive information is more critical than ever. Developing a functional program that sets up the best information security practices across the organization’s operational workflows, is the leading practice for protecting against a possible breach.

ISSMP for Busy People: The Busy Candidate’s Playbook for Passing the ISC2 Information Systems Security Management Professional (ISSMP) Exam is built for professionals who need serious exam preparation without pretending they have unlimited study time. ISSMP questions are rarely about memorizing isolated facts. They test whether you can think like a security leader, weigh tradeoffs, assign accountability, connect technical risk to business impact, and choose decisions that can be defended under pressure. This book turns that management-level reasoning into a practical study system for ...

GSLC for Busy People: The Busy Candidate’s Playbook for Passing the GIAC GSLC Exam is built for security professionals who need to master leadership-level cybersecurity concepts without getting buried in dense theory, disconnected definitions, or tool-focused detail. The GIAC GSLC exam demands more than technical knowledge. It tests whether you can evaluate risk, understand control intent, make defensible management decisions, recognize the best answer among several plausible choices, and connect security activity to business outcomes. This book is designed to help you develop that ...

A young listener’s adaptation of whistleblower and bestselling author Edward Snowden's memoir, Permanent Record—featuring a brand-new afterword that includes resources to learn about the basics of digital security. In 2013, Edward Snowden shocked the world when he revealed that the United...

This audiobook covers Overview of HC3 Observations and Research; Top Ransomware Groups Impacting Healthcare; Healthcare Industry Victimization by Ransomware; US States with the Most Ransomware Incidents; Data Leak Trends for the US Healthcare Sector; Sophos Ransomware in Healthcare Report; State-Sponsored Ransomware; and more. 

General efforts to help prevent ransomware attacks include maintaining offline, encrypted backups of data and regularly testing your backups; creating, maintaining, and exercising a basic cyber incident response plan, resiliency plan, and associated communications plan, and more.

Security isn’t just about guarding doors, it’s about cultivating professionalism, accountability, and trust in high-rise building environments. Security Program Report: offers a results-driven framework for developing disciplined, service-oriented teams that deliver excellence every shift...

In the relentless cyber war, understanding that every individual and organization is a target is crucial. In this book, I offer a groundbreaking perspective on cybersecurity risk management, addressing a core issue: despite increased legislation and frameworks, massive breaches continue. Why? The problem often lies in ineffective or non-existent risk assessment and management, resulting in an ineffective cybersecurity program. Enter Heuristic Risk Management (HRM), a method I developed that is simple, intuitive, and highly effective. HRM cuts through the complexity of quantitative ...