Data Breach Preparation and Response

*Data Breach Preparation and Response: Breaches are Certain, Impact is Not* is the first book to provide 360 degree visibility and guidance on how to proactively prepare for and manage a data breach and limit impact. Data breaches are inevitable incidents that can disrupt business operations and carry severe reputational and financial impact, making them one of the largest risks facing organizations today. The effects of a breach can be felt across multiple departments within an organization, who will each play a role in effectively managing the breach. Kevvie Fowler has assembled a team of leading forensics, security, privacy, legal, public relations and cyber insurance experts to create the definitive breach management reference for the whole organization.

Autorentext
Kevvie is a Partner and National Cyber Response Leader for KPMG Canada and has over 19 years of IT security and forensics experience. Kevvie assists clients in identifying and protecting critical data and proactively preparing for, responding to and recovering from incidents in a manner that minimizes impact and interruption to their business.

Kevvie is a globally recognized cyber security and forensics expert who in addition to author of Data Breach Preparation and Response is author of SQL Server Forensic Analysis and contributing author to several security and forensics books. He is an instructor who trains law enforcement agencies on cyber forensic and response practices. His cyber forensics research has been incorporated into formal course curriculum within industry and academic institutions including ISC2 and the University of Abertay Dundee. Credited with advancing the field of digital forensic science, Kevvie is a SANS lethal forensicator and sits on the SANS Advisory Board where he guides the direction of emerging security and forensics research.

As a sought after speaker, Kevvie has engaged executive and technical audiences at leading conferences and events including Black Hat, SECTOR, OWASP and the HTCIA and is a resource to the media with features on-air and in print within leading television, news and industry publications including The Business News Network, The Globe and Mail and Information Security and SC magazine.

Klappentext

Data Breach Response and Investigations is the first book to provide holistic and detailed guidance on managing a data breach, from preparing for a breach through proactive breach detection, to restoring trust after a breach. Author and speaker Kevvie Fowler is a recognized thought leader and pioneer in the field of database forensics, and has led teams in the security assessment, incident response, and forensic investigation of complex infrastructures within corporate, data center, third party, and SCADA environments. . Kevvie has assembled a team of noted experts in the field, who show readers everything they need to know about detecting, scoping, containing, and responding to a data breach, including tactics on how to proactively prepare for a breach, an exercise that has been proven to significantly reduce the impact to an organization by 23 percent. . The book gives readers the collective expertise of a team of recognized forensics, security, privacy, legal, and public relations experts with the real world experience to create the definitive breach management reference, an invaluable guide to a wide range of information security professionals, as well as those in business management who need to understand the critical issues involved.

Zusammenfassung

"The topic is covered beautifully and thoroughly, and approached from many different angles.Rare are the authors that know how to explain complex topics in a simple manner and know how to avoid boring the reader, but these authors belong to that category." --Help Net Security

"This book provides a thorough grounding in all the aspects of preparing for, dealing with and mopping up after a data breach and is likely to present issues you hadn't considered." --Network Security

Inhalt

1. Data breaches defined
2. Impact of a data breach
3. Data breach preparedness
4. Identifying a data breach
5. Managing notification: Who do you tell and when?
6. Investigating a suspected breach
7. Narrowly scoping confirmed breaches