LibGuides: TIM-6715 V1: Week 6 Resources

Week 6 Resources

Pomerleau, P., & Lowery, D.L. (2020). Countering cyber threats to financial institutions: A private and public partnership approach to critical infrastructure protection (1st ed.). 9783030540548.

Read Chapter 6, Research Findings; Contemporary Perceptions of Canadian Security Professionals Regarding the Challenges in Sharing Information with the Public Sector.

This chapter explores findings related to interviews conducted with corporate security professionals and the twelve themes of those discussions. Implications for best practice in the field of cybersecurity, specifically within the finance and banking industry, are discussed.

To access the Redshelf book, click on the book link located in the Getting Started module or the Bookshelf link on the top navigation bar of the course.

National Institute of Standard and Technology – Authority to Operate
National Institute of Standard and Technology. (n.d.). Computer security resource center.
The document (NIST SP 800-79-2) listed on the website reviews the possible decisions made by regulatory authorities that demonstrate the extent that an organization has completed all assessment activities leading to an authority to operate. Specifically, it includes Chapter 2, Preparation for Assessment and Authorization; Chapter 3, Taxonomy of Issuer Controls; Chapter 4, Issuer Controls Assessment & Authorization Decision Process; and Chapter 5, Assessment and Authorization Lifecycle is relevant to the assignment. The appendices contain helpful templates for plans and reporting. This document is a valuable tool to have as a reference.

The resources below are highly suggested, optional readings that will help you with this week’s assignments.

Threat Intelligence Sharing Between Cybersecurity Vendors: Network, Dyadic, and Agent Views
Zrahia, A. (2018). Threat intelligence sharing between cybersecurity vendors: Network, dyadic, and agent views. Journal of Cybersecurity, 1.
This article stresses the importance of sharing threat intelligence between vendors to limit the duplication of effort and allowing the knowledge gained by one organization to prevent attacks for other organizations.
Security Considerations in Big Data Solutions Adoption: Lessons from a Case Study on a Banking Institution
Salleh, K. A., & Janczewski, L. (2019). Security considerations in big data solutions adoption: Lessons from a case study on a banking institution. Procedia Computer Science, 164, 168–176.
This journal article discusses the numerous challenges associated with big data. Some topics discussed are securing data, the capability of legacy security mechanisms, managerial security awareness, top management support, security personnel skills, employees’ perception on sensitivity of information assets, regulatory compliance, the reputation of BDS vendors, and environmental uncertainties.
Cyber Strategy: Risk-Driven Security and Resiliency
Carol A. Siegel, & Mark Sweeney. (2020). Cyber Strategy: Risk-Driven Security and Resiliency. Auerbach Publications.
This e-book describes cybersecurity strategies using several of industry-standard frameworks discussed in this class. Some of the topics detailed are cyber risks and controls, current and target statement assessments, and measuring cybersecurity plan performance. This e-book is a valuable tool to have as a reference and specific chapters are valuable resources for the weekly assignments.