Security strategy

As explained in Data-Driven Cybersecurity

A cybersecurity strategy is an organization's coordinated plan for protecting digital systems, networks, and data while managing cybersecurity risks.

A security strategy coordinates asset visibility, risk evaluation, access management, and continuous improvement so cybersecurity decisions support business objectives and reduce exposure. section 6.0 section 6.6

Build the strategy around four connected activities:

• Maintain visibility into hardware, software, cloud resources, data, and third-party dependencies. section 6.0
• Assess vulnerabilities, threats, likelihood, consequences, and business effects to prioritize investments. section 6.0
• Measure security performance and refine controls as threats and business needs change. section 6.0
• Assign accountability and connect technical decisions with executive oversight, policies, regulations, and organizational goals. section 5.6.2

Acme Tech governance

At a global cloud-services company, the board oversees cybersecurity through executive reporting and measurable performance data. The CISO leads the strategy, compliance, teams, and risk communication, while analysts monitor threats, perform audits, and support incident response and forensics. section 5.6.2

Figure 5.9 The governance structure of our example company, Acme Tech

Use the governance structure to trace accountability from the board through executive leadership and operational security roles. section 5.6.2

How Data-Driven Cybersecurity covers it

How deep it goes

Explains assets, risk evaluation, metrics, governance, and continuous refinement, but does not provide detailed implementation procedures.

Examples

Uses Acme Tech’s board, CISO, analyst roles, governance diagram, asset inventories, risk assessments, and performance metrics.

What it assumes

Assumes organizational assets, risks, business objectives, and security responsibilities can be identified and evaluated.

What you can do after

Apply a structured approach to identify assets, prioritize cyber risks, align resources, and improve security measures over time.

How it connects

Connects governance, asset management, access management, identity management, risk assessment, cybersecurity metrics, and continuous improvement.

liveBookmanning.com

Read Data-Driven Cybersecurity on liveBook Get the book at manning.com

Related concepts

• strategykind of · A strategy is a planned approach for achieving objectives through coordinated choices, priorities, and actions.
• optimizationhas part · Optimization is the systematic selection or adjustment of values, actions, or system designs to improve a specified objective, often subject to constraints.
• incident responsehas part · Incident response is the organized process of detecting, managing, investigating, containing, and recovering from operational or security incidents.
• risk assessmenthas part · Risk assessment is the systematic identification and evaluation of potential adverse events, including their likelihood and consequences, to determine their significance.
• asset managementhas part · Asset management is the process of identifying, organizing, tracking, and governing assets throughout their use and lifecycle.
• identity and access managementhas part · Identity and access management is the discipline and set of policies and systems for managing digital identities and controlling their authentication, authorization, and access to resources.

This explainer was generated by Manning's knowledge graph from the text of Data-Driven Cybersecurity. The section links point to the parts of the book it draws on.