Crafting an Information Security Playbook

Crafting an Information Security Playbook
ISBN: 9781491949405
Publication Date: 15 May 2015

Any good attacker will tell you that expensive security monitoring and prevention tools aren’t enough to keep you secure. This practical book demonstrates a data-centric approach to distilling complex security monitoring, incident response, and threat analysis ideas into their most basic elements. You’ll learn how to develop your own threat intelligence and incident detection strategy, rather than depend on security tools alone.

Written by members of Cisco’s Computer Security Incident Response Team, this book shows IT and information security professionals how to create an InfoSec playbook by developing strategy, technique, and architecture.

Book features :

• Learn incident response fundamentals—and the importance of getting back to basics
• Understand threats you face and what you should be protecting
• Collect, mine, organize, and analyze as many relevant data sources as possible
• Build your own playbook of repeatable methods for security monitoring and response
• Learn how to put your plan into action and keep it running smoothly
• Select the right monitoring and detection tools for your environment
• Develop queries to help you sort through data and create valuable reports
• Know what actions to take during the incident response phase

About the Authors

With over ten years of information security experience, Jeff Bollinger has worked as a security architect and incident responder for both academic and corporate networks. Specializing in investigations, network security monitoring, and intrusion detection, Jeff Bollinger currently works as an information security investigator, and has built and operated one of the world's largest corporate security monitoring infrastructures. Jeff regular...