Chris Castaldo

Start-Up Secure (eBook, ePUB)

Baking Cybersecurity into Your Company from Founding to Exit

• Format: ePub

Produktbeschreibung

Add cybersecurity to your value proposition and protect your company from cyberattacks Cybersecurity is now a requirement for every company in the world regardless of size or industry. Start-Up Secure: Baking Cybersecurity into Your Company from Founding to Exit covers everything a founder, entrepreneur and venture capitalist should know when building a secure company in today's world. It takes you step-by-step through the cybersecurity moves you need to make at every stage, from landing your first round of funding through to a successful exit. The book describes how to include security and privacy from the start and build a cyber resilient company. You'll learn the basic cybersecurity concepts every founder needs to know, and you'll see how baking in security drives the value proposition for your startup's target market. This book will also show you how to scale cybersecurity within your organization, even if you aren't an expert! Cybersecurity as a whole can be overwhelming for startup founders. Start-Up Secure breaks down the essentials so you can determine what is right for your start-up and your customers. You'll learn techniques, tools, and strategies that will ensure data security for yourself, your customers, your funders, and your employees. Pick and choose the suggestions that make the most sense for your situation--based on the solid information in this book. * Get primed on the basic cybersecurity concepts every founder needs to know * Learn how to use cybersecurity know-how to add to your value proposition * Ensure that your company stays secure through all its phases, and scale cybersecurity wisely as your business grows * Make a clean and successful exit with the peace of mind that comes with knowing your company's data is fully secure Start-Up Secure is the go-to source on cybersecurity for start-up entrepreneurs, leaders, and individual contributors who need to select the right frameworks and standards at every phase of the entrepreneurial journey.

---

Dieser Download kann aus rechtlichen Gründen nur mit Rechnungsadresse in A, B, BG, CY, CZ, D, DK, EW, E, FIN, F, GR, HR, H, IRL, I, LT, L, LR, M, NL, PL, P, R, S, SLO, SK ausgeliefert werden.

Produktdetails

• Verlag: John Wiley & Sons
• Seitenzahl: 224
• Erscheinungstermin: 14. April 2021
• Englisch
• ISBN-13: 9781119700753
• Artikelnr.: 61526875

Autorenporträt

CHRIS CASTALDO is the Chief Information Security Officer at Crossbeam, the world's first and most powerful partner ecosystem platform. Crossbeam acts as a data escrow service that finds overlapping customers and prospects with your partners while keeping the rest of your data private and secure. Chris is also a Visiting Fellow at the National Security Institute at George Mason University's Antonin Scalia Law School. He previously held cybersecurity executive roles at Dataminr, 2U, IronNet Cybersecurity, Synchronoss, and the National Security Agency. He is a U.S. Army and Operation Iraqi Freedom veteran.

Inhaltsangabe

Foreword xv

Preface xvii

Acknowledgments xxi

About the Author xxv

Introduction 1

Part I Fundamentals

Chapter 1: Minimum Security Investment for Maximum Risk Reduction 7

Communicating Your Cybersecurity 9

Email Security 10

Secure Your Credentials 12

SAAS Can Be Secure 14

Patching 15

Antivirus is Still Necessary but Goes by a Different Name 18

Mobile Devices 18

Summary 20

Action Plan 20

Notes 21

Chapter 2: Cybersecurity Strategy and Roadmap Development 23

What Type of Business is This? 24

What Types of Customers Will We Sell To? 24

What Types of Information Will the Business Consume? 25

What Types of Information Will the Business Create? 25

Where Geographically Will Business Be Conducted? 26

Building the Roadmap 26

Opening Statement 26

Stakeholders 27

Tactics 27

Measurability 27

Case Study 28

Summary 30

Action Plan 30

Note 30

Chapter 3: Secure Your Credentials 31

Password Managers 32

Passphrase 33

Multi-Factor Authentication 35

Entitlements 37

Key Management 38

Case Study 39

Summary 41

Action Plan 42

Notes 42

Chapter 4: Endpoint Protection 43

Vendors 44

Selecting an EDR 45

Managed Detection and Response 46

Case Study 49

Summary 50

Action Plan 51

Notes 51

Chapter 5: Your Office Network 53

Your First Office Space 54

Co-Working Spaces 57

Virtual Private Network 58

Summary 60

Action Plan 60

Notes 60

Chapter 6: Your Product in the Cloud 63

Secure Your Cloud Provider Accounts 65

Protect Your Workloads 66

Patching 67

Endpoint Protection 68

Secure Your Containers 69

Summary 70

Action Plan 70

Notes 71

Chapter 7: Information Technology 73

Asset Management 74

Identity and Access Management 76

Summary 77

Action Plan 78

Part II Growing the Team

Chapter 8: Hiring, Outsourcing, or Hybrid 81

Catalysts to Hiring 82

Get the First Hire Right 83

Executive versus Individual Contributor 84

Recruiting 86

Job Descriptions 86

Interviewing 88

First 90 Days is a Myth 90

Summary 90

Action Plan 90

Note 91

Part III Maturation

Chapter 9: Compliance 95

Master Service Agreements, Terms and Conditions, Oh My 96

Patch and Vulnerability Management 97

Antivirus 98

Auditing 98

Incident Response 99

Policies and Controls 100

Change Management 100

Encryption 101

Data Loss Prevention 101

Data Processing Agreement 102

Summary 102

Action Plan 103

Note 103

Chapter 10: Industry and Government Standards and Regulations 105

Open Source 106

OWASP 106

Center for Internet Security 20 106

United States Public 106

SOC 106

Retail 109

PCI DSS 109

SOX 111

Energy, Oil, and Gas 111

NERC CIP 111

ISA-62443-3-3 (99.03.03)-2013 112

Federal Energy Regulatory Commission 112

De

Rezensionen

Additional praise for Star-Up Secure: Baking Cybersecurity into Your Company from Founding to Exit

"It's rare to see a cybersecurity guide of any kind that is relevant, current, and most importantly, cogent and accessible. Chris Castaldo has not only produced such a guide but has tailored it for an audience who has never before received such wisdom in a digestible manner.the startup community. Startups are notoriously fast-moving, and Castaldo's book keeps up with them, showing them the types of practical security controls they need throughout their rapid journey to whatever exit strategy they envision."

--Allan Alford, veteran CISO and co-host of the Defense in Depth podcast

"Start-Up Secure offers important insights and advice in an area that is often overlooked by entrepreneurs. Cybersecurity has emerged as a critical competency for businesses, and this trend will likely continue or accelerate. The guidance provided in these pages will savefounders from making preventable mistakes in multiple dimensions, from technical security decisions to avoiding unreasonable contract language. The wisdom shared by Chris is hard-learned, and a valuable addition to any entrepreneur's thought process."

--Paul Ihme, co-founder, Soteria

"Cybersecurity is often thought of as too intimidating or complex for the layperson to comprehend. Chris Castaldo's book Start-Up Secure seeks to take the mystery out of succeeding at cybersecurity. His straightforward and direct approach serves as an essential guide to starting out on the right foot with your security program. It is accessible and actionable and I would recommend it to anyone seeking to tackle cybersecurity; the most important business challenge of our time."

--Brian Markham, CISO, EAB Global Inc.