LibGuides: TIM-8330 V4: Week 1 Resources

Week 1 Resources

Accessing O’Reilly (A technology resource database)
You will be reading select chapters from various books or watching videos from the O’Reilly Database. Please follow all five steps described here to access content directly from or linked to the database.
Please ensure that you complete step 5, confirming the email where you create the password – this enables automatic access for all O'Reilly resources in your browser.
Cybersecurity and Third-Party Risk
Rasner, G. (2021). Cybersecurity and third-party risk. Wiley.
Read Chapter 4 – Third-Party Risk Management.
This chapter explains Third-Party Risk Management (TPRM) which is the process of identifying, assessing, and controlling risks presented through the lifecycle of a relationship with third parties.
Modern Data Protection
Preston, W. C. (2021). Modern data protection. O'Reilly Media, Inc.
Read Chapter 1 – Risks to Your Data: Why We Back Up.
This chapter explains the importance and purpose of backup strategies.
Read Chapter 2 – Gathering and Determining Service Levels.
This chapter discusses the need to align organization-specific goals with a framework for data protection. Compliance and governance are some of the important topics in this chapter.
Read Chapter 12 –Data Protection Targets.
This chapter explains the differences between various data protection targets.
Read Chapter 13 – Commercial Data Protection Challenges.
This chapter discusses the various challenges that need to be considered when formulating a strategy with commercial options.

Organization Scenarios

The resources below are highly suggested, optional readings that will help you with this week’s assignments.

Risk Management Framework for Systems and Organizations Introductory Course
National Institute of Standards and Technology. (2021). RMF for systems and organizations introductory course. NIST.
This 3-hour introductory course provides an overview of a methodology for managing organizational risk per NIST SP 800-37, R2.