175+ Cybersecurity Misconceptions and the Myth-Busting Skills You Need to Correct Them

Cybersecurity is fraught with hidden and unsuspected dangers and difficulties. Despite our best intentions, there are common and avoidable mistakes that arise from folk wisdom, faulty assumptions about the world, and our own human biases. Cybersecurity implementations, investigations, and research all suffer as a result. Many of the bad practices sound logical, especially to people new to the field of cybersecurity, and that means they get adopted and repeated despite not being correct. For instance, why isn't the user the weakest link?

In Cybersecurity Myths and Misconceptions: Avoiding the Hazards and Pitfalls that Derail Us, three cybersecurity pioneers don't just deliver the first comprehensive collection of falsehoods that derail security from the frontlines to the boardroom; they offer expert practical advice for avoiding or overcoming each myth.

Whatever your cybersecurity role or experience, Eugene H. Spafford, Leigh Metcalf, and Josiah Dykstra will help you surface hidden dangers, prevent avoidable errors, eliminate faulty assumptions, and resist deeply human cognitive biases that compromise prevention, investigation, and research. Throughout the book, you'll find examples drawn from actual cybersecurity events, detailed techniques for recognizing and overcoming security fallacies, and recommended mitigations for building more secure products and businesses.

• Read over 175 common misconceptions held by users, leaders, and cybersecurity professionals, along with tips for how to avoid them.
• Learn the pros and cons of analogies, misconceptions about security tools, and pitfalls of faulty assumptions. What really is the weakest link? When aren't "best practices" best?
• Discover how others understand cybersecurity and improve the effectiveness of cybersecurity decisions as a user, a developer, a researcher, or a leader.
• Get a high-level exposure to why statistics and figures may mislead as well as enlighten.
• Develop skills to identify new myths as they emerge, strategies to avoid future pitfalls, and techniques to help mitigate them.

"You are made to feel as if you would never fall for this and somehow this makes each case all the more memorable. . . . Read the book, laugh at the right places, and put your learning to work. You won't regret it."
--From the Foreword by Vint Cerf, Internet Hall of Fame Pioneer

Register your book for convenient access to downloads, updates, and/or corrections as they become available. See inside book for details.

18+ Hours of Video Instruction

18+ hours of video training to prepare you for the CISM certification exam

Overview:
The Pearson Complete Course for CISM Certification offers 18 hours of targeted training to help you get the skills you need to successfully study for the CISM exam. Taught by expert author and trainer Sari Greene, the course covers the four main domains of the CISM exam: Information Security Governance, Information Security Risk Management, Information Security Program Development and Management and Incident Management. The course is also a great resource for anyone who wants to enhance their cybersecurity skills to grow their career.

The Pearson Complete Course for CISM Certification will enable you to learn the skills to design, deploy and manage security policies. The course starts with a basic introduction of the exam modules and topic domains before diving deeper into the main modules which incorporate real-world scenarios and practical applications. Each lesson concludes with a review and a quiz, giving you the opportunity to test what you have learned in the lesson. The course also provides tips and valuable information on how to answer questions and ace the CISM certification exam.

This accessible self-paced video training provides learners with more than 18 hours of in-depth exam topic assessment from one of the leading cybersecurity experts to review each exam objective, so you can use it as a complete study tool for taking the CISM certification exam.

Topics include:
Module 1: Information Security Governance
Module 2: Information Security Risk Management
Module 3: Information Security Program Development & Management
Module 4: Incident Management
Module 5: Attaining Your Certification

Skill Level:

• Intermediate to Advanced

• Govern information and cybersecurity fundamentals
• Strategize information strategy
• Manage information security risk
• Manage penetration testing
• Develop and manage InfoSec program ecosystem
• Design and implement wireless connectivity, firewalls, and encryption
• Manage malware and social engineering

• Primary audience is anyone preparing for the ISACA CISM certification examination.
• Secondary audience is anyone would be like to enhance their cybersecurity skills.