Table Of ContentInformation Security Handbook
Develop a threat model and incident response strategy to build a strong information
security framework
Darren Death
BIRMINGHAM - MUMBAI
Information Security Handbook
Copyright © 2017 Packt Publishing
All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted
in any form or by any means, without the prior written permission of the publisher, except in the case of
brief quotations embedded in critical articles or reviews.
Every effort has been made in the preparation of this book to ensure the accuracy of the information
presented. However, the information contained in this book is sold without warranty, either express or
implied. Neither the author, nor Packt Publishing, and its dealers and distributors will be held liable for
any damages caused or alleged to be caused directly or indirectly by this book.
Packt Publishing has endeavored to provide trademark information about all of the companies and
products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot
guarantee the accuracy of this information.
First published: December 2017
Production reference: 1071217
Published by Packt Publishing Ltd.
Livery Place
35 Livery Street
Birmingham
B3 2PB, UK.
ISBN 978-1-78847-883-0
www.packtpub.com
Credits
Author Copy Editor
Darren Death Safis Editing
Reviewers Project Coordinator
Abhinav Rai Judie Jose
Heath Renfrow
Commissioning Editor Proofreader
Gebin George Safis Editing
Acquisition Editor Indexer
Heramb Bhavsar Pratik Shirodkar
Content Development Editor Graphics
Abhishek Jadhav Tania Dutta
Technical Editor Production Coordinator
Mohd Riyan Khan Aparna Bhagat
About the Author
Darren Death is an information security professional living in the DC Metropolitan Area. During his
17-year technology career, he has supported the private and public sector at the local, state, and national
levels. Darren has worked for organizations such as the Department of Justice, Library of Congress, and
the Federal Emergency Management Agency. Darren currently works for Artic Slope Regional
Corporation as its chief information security officer. In this role, Darren is responsible for the ASRC
Enterprise Information Security program, where he manages the Information Security program across
the 3 billion dollar ASRC portfolio crossing many business sectors to include energy, financial services,
hospitality, retail, construction, and federal government contracting.
Darren is very active in the information security community and can be heard at many conferences
throughout the year speaking on many of the topics covered in this book. Infragard is an organization
that is dedicated to sharing information and intelligence working to prevent hostile acts against the
United States. In this role, he teaches students the building blocks that go into establishing a successful
information security program.
I would like to thank my amazing wife and children for putting up with me and sacrificing the time that
it took to write this book.
I would also like to thank the many executives that have walked alongside me throughout my career.
These executives include: Leif Henecke, CIO at ASRC Federal; Ann-Marie Massenberg, Chief of Staff
at the Office of Financial Management at the US Department of Transportation; Jonathan Alboum, CIO
at USDA; Steve Elky, Director of IT Strategic Planning at the Library of Congress; Douglas Ament,
CIO at the US Copyright Office; Kyle Holtzman, Deputy Assistant Director of Service Portfolio
Management at the U.S. Department of Justice; and Oscar Jordan, Master Sergeant United States Air
Force.
Without learning the valuable lessons that I learned from these professionals, I would not be where I am
today. It is also because of these individuals that I strongly support and participate in mentoring
opportunities for others who are staring in their IT careers and work to teach and spread what I have
learned to others regarding IT and Information Security best practices.
About the Reviewers
Abhinav Rai has been associated with information security professional and has experience in web
application security, network security, mobile application security, web services security, source code
review, and configuration audit. He is currently working as an information security professional.
He has completed his degree in computer science and his postgraduate diploma in IT infrastructure,
systems and security. He also holds a certificate in communication protocol design and testing. He can
be reached at .
[email protected]
Mr. Heath Renfrow has served the Chief Information Security Officer for multiple global
organizations, and most recently as the CISO for United States Army Medicine, where he was awarded
the 2017 Global CISO of the year by EC-COUNCIL, the largest cyber training body in the world. Mr.
Renfrow has 20 years of global cyber security professional experience, and is considered one of the
leading cyber experts today. He holds Bachelors in Science in Information Technology, and a Master’s
of Science in Cyber Studies. Mr. Renfrow also holds numerous industry leading certifications, including
Certified Chief Information Security Officer (C|CISO), Certified Information Systems Security
Professional (CISSP), and Certified Ethical Hacker (C|EH).
All praise to my Lord and Savior, and as always a thank you to my loving and supportive wife, Kathy, as
I would be nothing without both!
www.PacktPub.com
For support files and downloads related to your book, please visit .
www.PacktPub.com
Did you know that Packt offers eBook versions of every book published, with PDF and ePub files
available? You can upgrade to the eBook version at and as a print book customer, you are
www.PacktPub.com
entitled to a discount on the eBook copy. Get in touch with us at for more details.
[email protected]
At , you can also read a collection of free technical articles, sign up for a range of free
www.PacktPub.com
newsletters and receive exclusive discounts and offers on Packt books and eBooks.
https://www.packtpub.com/mapt
Get the most in-demand software skills with Mapt. Mapt gives you full access to all Packt books and
video courses, as well as industry-leading tools to help you plan your personal development and
advance your career.
Why subscribe?
Fully searchable across every book published by Packt
Copy and paste, print, and bookmark content
On demand and accessible via a web browser
Customer Feedback
Thanks for purchasing this Packt book. At Packt, quality is at the heart of our editorial process. To help
us improve, please leave us an honest review of this book's Amazon page at
https://www.amazon.com/dp/17884
.
78835/
If you'd like to join our team of regular reviewers, you can e-mail us at . We
[email protected]
award our regular reviewers with free eBooks and videos in exchange for their valuable feedback. Help
us be relentless in improving our products!
