Security Audit

ISO 27001: Internal Audits & Data Protection: Strengthening Compliance & Security A Practical Guide to Conducting Internal Audits and Safeguarding Sensitive Data In the digital age, organizations must ensure the confidentiality, integrity, and availability of their sensitive information. This practical guide helps businesses understand the key concepts of ISO 27001, focusing on conducting internal audits and implementing data protection strategies to strengthen compliance and security. The book provides a step-by-step approach for performing thorough internal audits in alignment with ISO ...

ISO 27001:2022 Explained – A Comprehensive Clause-by-Clause Guide Achieving ISO 27001:2022 compliance is essential for protecting your organization’s sensitive information and ensuring data security. This comprehensive guide takes you through the entire ISO 27001 framework with step-by-step instructions, real-world examples, and practical tools to help you build and maintain a robust Information Security Management System (ISMS).What’s Inside: Clause-by-Clause Breakdown: Each chapter offers a clear explanation of every ISO 27001 clause and how to implement it effectively. From Context...

Cyber Risk Management for Financial Professionals offers a rigorous guide for accountants, auditors, finance managers, risk officers, internal control specialists, and governance leaders who need to understand cyber risk from a financial, control, audit, and reporting perspective. Most books on cyber security speak to technical teams. Most finance books treat cyber risk as a side topic. Cyber Risk Management for Financial Professionals closes that gap with a finance-first approach grounded in governance, internal control, audit planning, financial reporting, accountability, and board ...

If you are aiming for the CGRC exam while juggling deadlines, meetings, and real responsibilities, you do not need a massive reference book. You need a clean, practical map of what the exam expects, written in a way that makes it easy to study in small blocks of time. CGRC for People With Jobs is built for that exact situation. This book is for people who already work near security, privacy, audit, risk, or compliance and want to turn that experience into consistent exam performance. The outcome is not vague motivation or hype. The outcome is a tighter understanding of the lifecycle the ...

Unlock the secrets to securing the future with "Security and Smart Contract Audits," the ultimate guide for navigating the complex world of blockchain security. As digital landscapes evolve, so do the threats that lurk within them. This comprehensive eBook demystifies the intricacies of smart contract security, providing invaluable insights for developers, tech enthusiasts, and business leaders alike. Begin your journey by understanding the foundational elements of blockchain security and the vital role smart contracts play in safeguarding digital transactions. Delve into the depths of ...

Military Finance in Practice is a practical guide to defence budgeting, procurement, cost control and audit evidence for professionals working in defence, security, public finance, audit, procurement and governance. Defence organisations manage resources under conditions unlike ordinary public institutions. They operate with classified activity, urgent missions, high-value contracts, specialist suppliers, sensitive assets, ammunition, fuel, military infrastructure, payroll allowances, and long-term capability programmes. Financial decisions in this environment affect readiness, mission ...

Smart Contract Risk Management is a professional guide for executives, auditors, finance teams, lawyers, compliance officers, blockchain developers, and digital asset managers who need to understand the risks behind blockchain-based agreements. Smart contracts promise automation, speed, traceability, and lower transaction friction. They also create serious exposure when legal terms, code logic, private keys, oracle data, financial records, governance powers, and regulatory duties do not align. A transaction may execute correctly on-chain while creating legal disputes, accounting errors, ...

PowerShell has become one of the most powerful —and most feared— tools in today’s offensive security arsenal. This book explores its use through a clear, methodical, and progressive perspective: starting from the environment, syntax, and basic cmdlets, and guiding the reader toward PowerShell’s true potential in offensive cybersecurity operations. Through detailed explanations, reproducible examples, and hands-on labs, the reader will learn how Windows operates internally, how its weaknesses become exposed, and how an adversary could leverage PowerShell to enumerate, abuse, persist,...

It's all hands on deck for a cross-functional team of executives and engineers to develop a modern automated governance process that satisfies regulators without slowing the company's ability to meet customer demands and compete in the market. In the vein of bestselling titles The Phoenix Project and The Unicorn Project, Investments Unlimited helps organizations radically rethink how they handle audit, compliance, and security for their software systems.

This book presents a standard methodology approach to cyber-resilience. Readers will learn how to design a cyber-resilient architecture for a given organization as well as how to maintain a state of cyber-resilience in its day-to-day operation. Readers will know how to establish a state of...

The global framework is undergoing a structural reconfiguration that marks the transition from traditional geopolitical competition to a state of absolute, multi-domain hegemony. This study, China's 150 Hegemonic Breakthroughs, Systems, and Technologies, provides a comprehensive audit of the strategic vectors through which this shift is being realized, moving beyond fragmented technological advancements toward a unified, self-sustaining ecosystem of power. By consolidating the computational brains, the material atoms, the kinetic machinery, and the biological building blocks of the modern ...

Quantum computing threatens the encryption systems protecting financial records, audit evidence, tax files, banking instructions, payroll data, digital signatures, cloud platforms, and client communications. Financial professionals need a clear response before large-scale quantum computers place RSA, Diffie-Hellman, and elliptic-curve cryptography at risk. Post-Quantum Cybersecurity for Accountants gives accountants, auditors, chief financial officers, controllers, risk officers, compliance teams, regulators, consultants, and finance students a practical guide to quantum risk. It explains ...

Ever feel like you don’t even own the hardware and software you paid dearly for? Ever get the impression that you have to ask for permission before installing or changing a program on your device? Ever feel like Facebook and Instagram are listening to your conversations to show you relevant ads? You’re not alone. Half-baked products and services that chip away at your sense of ownership, independence and privacy are a part of a global wave of corporate indifference that micromanages and spies on honest, uniformed customers.

AI probably won’t replace your entire job. But it may replace enough of it to change your career. For millions of professionals, the question is no longer whether artificial intelligence will affect their work. It’s which parts of their work are vulnerable—and what they should do about it now. The AI-Proof Career Audit is a practical guide and workbook for mid-career professionals who want something more useful than predictions about the future of AI. Instead of asking “Will AI take my job?”, you’ll break your role into the tasks you actually perform and determine which ones AI ...

Agentic AI is no longer a futuristic concept—it is already inside your workflows, your products, and your business decisions. The question is no longer whether your organization will use autonomous AI systems, but whether you will govern them before they govern you. Principles of Agentic AI Governance is the definitive playbook for managers, directors, and executives who must turn powerful, unpredictable AI agents into safe, compliant, and high‑value operational capabilities. The book opens with a scenario that has already played out across industries: an AI agent, given broad access ...

Crypto shouldn’t feel like a casino or a cult. Crypto: The Definitive Guide to CryptoCurrencies is a clear, story-driven manual for people who want practical results without hype. Carmen and Harold Laski walk you through real-world setup—hot and “quiet” (cold) wallets, a fast lost-phone recovery drill, and a plain-English checklist for choosing a stablecoin. You’ll learn to move money across borders in minutes, keep tidy records for taxes, and avoid classic traps that prey on urgency and confusion. Inside you’ll find: the difference between coins, tokens, and stablecoins; how ...