Table Of ContentCybertax
IT Pro Practice Notes
Published:
Practical Guide to IT Problem Management
by Andrew Dixon
ISBN: 978-1-032-42225-1
Managing Cybertax Risk and Results
by George K. Tsantes and James F. Ransome
ISBN: 978-1-032-36067-6
Forthcoming:
The Busy IT Manager’s Guide to Data Recovery
by Preston de Guise
ISBN: 978-1-032-45125-1
Understanding Project Practices and Processes
by Mel Bost
ISBN: 978-1-032-42225-1
Cybertax
Managing the Risks
and Results
George K. Tsantes
James F. Ransome
First edition published 2023
by CRC Press
6000 Broken Sound Parkway NW, Suite 300, Boca Raton, FL 33487-2742
and by CRC Press
4 Park Square, Milton Park, Abingdon, Oxon, OX14 4RN
© 2023 George K. Tsantes and James F. Ransome
CRC Press is an imprint of Taylor & Francis Group, LLC
Reasonable efforts have been made to publish reliable data and information, but the
author and publisher cannot assume responsibility for the validity of all materials
or the consequences of their use. The authors and publishers have attempted to
trace the copyright holders of all material reproduced in this publication and
apologize to copyright holders if permission to publish in this form has not been
obtained. If any copyright material has not been acknowledged please write and
let us know so we may rectify in any future reprint.
Except as permitted under U.S. Copyright Law, no part of this book may be
reprinted, reproduced, transmitted, or utilized in any form by any electronic,
mechanical, or other means, now known or hereafter invented, including
photocopying, microfilming, and recording, or in any information storage or
retrieval system, without written permission from the publishers.
For permission to photocopy or use material electronically from this work, access
www.copyright.com or contact the Copyright Clearance Center, Inc. (CCC),
222 Rosewood Drive, Danvers, MA 01923, 978-750-8400. For works that are
not available on CCC, please contact [email protected]
Trademark notice: Product or corporate names may be trademarks or registered
trademarks and are used only for identification and explanation without intent
to infringe.
Library of Congress Cataloging-in-Publication Data
A catalog record has been requested for this book.
ISBN: 978-1-032-36068-3 (hbk)
ISBN: 978-1-032-36067-6 (pbk)
ISBN: 978-1-003-33010-3 (ebk)
DOI: 10.1201/9781003330103
Typeset in Sabon LT Pro
by DerryField Publishing Services
Some material in this book is taken from the following book written by one or both
of the authors, with permission from Taylor & Francis Group:
Core Software Security: Security at the Source / ISBN: 978-1-4665-6095-6 / 2013
Dedications
To the senior executives and boards of directors who are looking
for a better way to manage cybersecurity across the organizations
they lead.
— George K. Tsantes and James F. Ransome
This book is dedicated to the loving memory of Captain George
Tsantes Jr. USN. George also dedicates this book to Joanna for
all her patience and support.
— George K. Tsantes
Contents
Dedications v
Contents vii
Preface xi
Acknowledgments xv
About the Authors xvii
Chapter 1
What Is Cybertax? 1
1.1 Introduction 1
1.2 Cybertax Definition 1
1.3 Cybertax and Zero Trust 3
1.4 Chapter Summary 3
Chapter 2
Cybertax Management 5
2.1 Introduction 5
2.2 Cybertax Metrics and Measurement 6
2.2.1 The Seven C’s Intro 6
2.2.2 How to Measure 11
2.2.3 How to Monitor 11
2.2.4 Culture—Leadership 12
2.2.5 Culture—Make New Mistakes 12
2.3 Cybertax Management 13
2.3.1 Using the Key Metrics 13
2.3.2 Directing Goals 13
vii
Cybertax—Managing the Risks and Results
2.3.3 Driving Outcomes 13
2.3.4 Do More/Do Less 14
2.4 Summary 15
Chapter 3
Cybertax Efficiency 17
3.1 Introduction 17
3.2 Driving Efficiency 17
3.3 Driving Effectiveness 22
3.4 Rewarding Progress 23
3.5 Summary 25
References 25
Chapter 4
Know Your Adversary 27
4.1 Introduction 27
4.2 Cybersecurity Risk 28
4.3 Cybersecurity Threats 29
4.3.1 Threat Actors: The Dark Side of a
Connected World 32
4.3.2 C ompromise Vectors 39
4.3.3 Compromise Impacts 63
4.4 Chapter Summary 69
References 70
Chapter 5
Governing Cybersecurity Risk 79
5.1 Introduction 79
5.2 The Exception of Cybersecurity Governance 79
5.3 The Challenges of Managing Cybersecurity Risk 80
5.3.1 Traditional Security Assessments 81
5.3.2 Leadership Challenges 82
5.3.3 Infinity and Beyond 82
viii
Contents
5.3.4 Chief Information Security Officer
(CISO) 83
5.3.5 Below the Surface 84
5.3.6 Emerging Threats 85
5.3.7 Cybertax 87
5.4 Summary 87
References 88
Chapter 6
Solution—CYBERPHOS 89
6.1 Introduction 89
6.2 The Seven C’s 90
6.2.1 C omplexity 91
6.2.2 Capability 92
6.2.3 Competency 95
6.2.4 Comparison 96
6.2.5 Conceptualization 97
6.2.6 Cost 97
6.2.7 Continuous 98
6.3 Key Concerns 100
6.3.1 Security Assessments (Traditional) 101
6.3.2 Leadership Challenges 102
6.3.3 Infinity and Beyond 102
6.3.4 Chief Information Security Officer
(CISO) 102
6.4 Active Cybersecurity Governance 104
6.5 CYBERPHOS Hyperledger® 104
6.6 Summary 106
6.7 Conclusion 108
References 109
Glossary 111
Index 113
ix
