Cyber Security

The complete guide to cyber threats and protection

By (author) David Sutton

Publication date: 12 Dec 2022

Cyber security has never been more essential than it is today, it’s not a case of if an attack will happen, but when. This brand new edition covers the various types of cyber threats and explains what you can do to mitigate these risks and keep your data secure.

Cyber Security explains the fundamentals of information security, how to shape good organisational security practice, and how to recover effectively should the worst happen.

Written in an accessible manner, Cyber Security provides practical guidance and actionable steps to better prepare your workplace and your home alike. This second edition has been updated to reflect the latest threats and vulnerabilities in the IT security landscape, and updates to standards, good practice guides and legislation.

• A valuable guide to both current professionals at all levels and those wishing to embark on a cyber security profession

• Offers practical guidance and actionable steps for individuals and businesses to protect themselves

• Highly accessible and terminology is clearly explained and supported with current, real-world examples

David Sutton's career in IT spans nearly 55 years and includes voice and data networking, information security and critical information infrastructure protection. He is a Chartered Fellow of BCS, a member of the Chartered Institute for Information Security (CIISec) and a Freeman of the Worshipful Company of Information Technologists (WCIT).

Print ISBN-13: 9781780175959

Ebook ISBN-13: 9781780175973

222 pages

Imprint: BCS, The Chartered Institute for IT

Preface

1. Introduction

2. The big issues

3. Cyber targets

4. Cyber vulnerabilities and impacts

5. Cyber threats

6. Risk management overview

7. Business continuity & disaster recovery

8. Basic cyber security steps

9. Organisational security steps

10. Awareness and training

11. Information sharing

Bibliography

Appendix A - Standards

Appendix B - Good practice guidelines

Appendix C - Cyber security law

Appendix D - Cyber security training

Appendix E - Links to other useful organisations

David Sutton's books provides well researched, comprehensive guide to the multifaceted, rapidly growing cyber domain. It serves as a valuable guide to both current professionals and those wishing to embark on a Cyber Security profession. An excellent read.

Colonel John S Doody FBCS FCMI CITP ACISP MIOD, Director, Interlocutor Services Limited

A very comprehensive primer on cyber security covering issues, solutions and suggestions for further action. After reading this book anyone that worries about cyber security without necessarily wanting to become an expert will find themself much better informed and quite probably much more interested.

Susan Perriam MBA MSc CMgr MBCS CISSP, Cyber Security Consultant

This book manages to strike a perfect balance between technical breadth and depth. It includes enough detail to understand the broad range of concepts and techniques found in a complex industry, along with practical and real-life examples. This latest revision is packed with recent examples, scenarios, tools, and techniques that make it a fascinating read for both industry veterans and recent joiners alike. Highly recommended.

Martin King FBCS CITP CISSP, Chief Technology Officer, IT Transformed

This book describes the eco system of cyber security and provides excellent go-to guides and considerations for people/teams dealing with both technical and non-technical security. Awareness and training are at the very heart of the book, successfully paralleled by descriptions of how our day-to-day information sharing and protection should take place safely. A useful and insightful read and highly recommended.

Lesley-Anne Turner, Cyber Compliance, CDDO, Cabinet Office

The style and structure makes it an ideal book for students as it covers all the important topics, from the fundamentals of information security such as the CIA model, through to organisational issues (policies and disaster recovery), legal requirements and security standards. Terminology is clearly explained and supported with current, real-world examples. It is a most valuable resource.

Richard Hind MSc MBCS FHEA, Tutor of Digital Technologies, York College

This book gives a good insight into cyber security, with modern day examples and practical guidance on how to proactively mitigate against risks. This will definitely be a book I refer to frequently.

Bianca Christian, Business Analyst, Young Business Analysts (YBA)

On first reading this book, the biggest impression that greets the reader is that it’s NOT a technical reference book and is widely focused on the wider impact of cyber security on society as a whole. It is not just for technologists and treats a complex subject with just the right level of both technical and socioeconomic balance. Highly recommended.

Adrian Winckles MBCS CITP CEng, Chair of BCS Cybercrime Forensics SG and OWASP Education Committee

Cyber Security 2e is a rich technical guide on cyber threats. Leaving no stone unturned, the first half touches on key examples and paints a clear picture of the current threat landscape that both individuals and organisations face, and the second half contains solutions. Sutton aptly spotlights a number of actions that anyone could be encouraged to practice for good personal and corporate security.

Ester Masoapatali MBCS, Information Security Specialist, Partnerships Manager, CybSafe

This book is a fantastic resource for those breaking into the industry, or for non-security leaders who want to know more about the risks faced by their business. Written in an accessible manner, this second edition gives readers updated information and current examples showing the changing trends and tactics of attackers.

Jim Wright, Managing Director, Principle Defence

This book is for anyone who wants to understand and learn more about cybersecurity. It provides a foundation of cybersecurity knowledge as well as essential practical skills and techniques for entry and junior-level cybersecurity roles. It is also designed to help learners in building a promising and rewarding career pathway in the cybersecurity field.

Dr Sherif El-Gendy FBCS, Information Security Expert

This highly accessible second edition provides a thorough update to the world of cyber security in a non-technical manner; firstly clarifying cyber security issues and then focusing on cyber security solutions. If you are looking for a go-to reference that explains cyber security in plain language, this book is for you.

Tim Clements FBCS CITP FIP CIPP/E CIPM CIPT, Purpose and Means

This book demystifies what can, to many, be a rather bewildering topic, and it sets clear context and eloquently describes the landscape of threats and issues, and provides clear, actionable advice across key topics. A handy and well-written reference guide, and highly recommended reading!

Paul Watts MBCS CITP FCIIS CISSP CISM, former CISO and Distinguished Analyst, Information Security Forum

A thought-provoking and excellent read. Essential for cybersecurity practitioners working across numerous specialisations and at all levels of management. This blended use of theory and practical applications sets this book apart, complements industry-leading certifications and make it a must-read for anyone working within cyber.

Gary Cocklin CITP CISSP, Senior Cyber Security Practitioner, UK Royal Air Force (RAF)

This book is not just for cyber professionals, it’s for everyone. This book is easy to follow and clearly articulates what cyber is and why it matters. It provides insights into why cyber-attacks occur and offers practical and technical guidance for individuals and businesses to protect themselves. This will be my go-to resource for cyber security.

Thando Jacobs, Business Analyst, Senior Leadership Team, Young Business Analysts (YBA)

This book delivers a comprehensive overview of cyber security and is packed with numerous interesting, relevant examples to illustrate key points. Readers will gain insights on why they might be attacked and measures to protect against ever increasing cyber threats. Therefore I highly recommend this publication for individuals and organisations alike.

Olu Odeniyi, Cyber Security, Information Security and Digital Transformation Advisor, Thought Leader and Speaker

Easy to follow, digestible and highly relevant for the world we live in today. Not just for cybersecurity professionals, business continuity practitioners will gain valuable insight as well as hints and tips on what cybersecurity aspects to consider when developing business continuity plans and response arrangements.

Hilary Estall MBCI, IRCA BCMS Principal Auditor, Business Continuity Practitioner, Director Perpetual Solutions