LibGuides: TIM-6715 V1: Week 4 Resources

Week 4 Resources

Pomerleau, P., & Lowery, D.L. (2020). Countering cyber threats to financial institutions: A private and public partnership approach to critical infrastructure protection (1st ed.). 9783030540548.

Read Chapter 4, The Evolution of the Threats to Canadian Financial Institutions, the Actual State of Public and Private Partnerships in Canada.

This chapter makes a case for shared responsibility between government and private entities to increase the infrastructure’s resiliency within the threat landscape. Three theoretical frameworks to better understand the relationship between public and private entities and information-sharing partnerships are proposed.

To access the Redshelf book, click on the book link located in the Getting Started module or the Bookshelf link on the top navigation bar of the course.

Application of the Common Cyber Threat Framework – Use Cases
Office of the Director of National Intelligence (July, 2018). Application of the Common Cyber Threat Framework.
This unclassified document demonstrates the application of the cyber threat framework through the stages of preparation, engagement, presence, and effect/consequence. Specific examples of documentation and reporting are provided. Pages 27-34 highlight a case exercise for review.
A Framework for Reasoning about the Human in the Loop
Cranor, L. F. (2008). A framework for reasoning about the human in the loop. In Proceedings of the 1st Conference on Usability, Psychology, and Security (UPSEC’08). USENIX Association, USA, Article 1, 1–15.
This article details the importance of considering the “human in the loop” when approaching cybersecurity responses and planning. The author makes a case for maximizing the probability of successful security outcomes before, during, and after human interaction with the system.

The resources below are highly suggested, optional readings that will help you with this week’s assignments.

Cyber Threat Intelligence Sharing: Survey and Research Directions
Wagner, T. D., Mahbub, K., Palomar, E., & Abdallah, A. E. (2019). Cyber threat intelligence sharing: Survey and research directions. Computers & Security, 87.
This journal article discusses many aspects of cyber threat intelligence, including humans’ role, risks, benefits, sharing with industry sectors, collaboration, and more. The authors make a strong case for sharing as a mitigation strategy for ever prevalent cyberattacks.
The Cyber Acumen: An Integrative Framework to Understand Average Users Decision-Making Processes in Cybersecurity in Analyzing Human Behavior in Cyberspace
Liu, Xiang M. (2019). The cyber acumen: An integrative framework to understand average users decision-making processes in cybersecurity in analyzing human behavior in cyberspace. IGI Global, 192.
The chapter in the book describes the need to consider good and bad actors’ human behaviors as providing insight into the planning of and response to cybersecurity risks and threats.
Santander Consumer Finance SA SWOT Analysis
Santander Consumer Finance SA SWOT Analysis. (2020). Santander Consumer Finance, S.A. SWOT Analysis, 1–7.
This sample company SWOT analysis demonstrates the need to factor in cybersecurity threats, associated risks, and compliance and regulation into the company’s assessment of strengths, weaknesses, opportunities, and threats from a financial perspective.
Cyber Strategy: Risk-Driven Security and Resiliency
Carol A. Siegel, & Mark Sweeney. (2020). Cyber Strategy: Risk-Driven Security and Resiliency. Auerbach Publications.
This e-book describes cybersecurity strategies using several of industry-standard frameworks discussed in this class. Some of the topics detailed are cyber risks and controls, current and target statement assessments, and measuring cybersecurity plan performance. This e-book is a valuable tool to have as a reference and specific chapters are valuable resources for the weekly assignments.