The Cybersecurity Playbook

The real-world guide to defeating hackers and keeping your business secure

Many books discuss the technical underpinnings and complex configurations necessary for cybersecurity—but they fail to address the everyday steps that boards, managers, and employees can take to prevent attacks. The Cybersecurity Playbook is the step-by-step guide to protecting your organization from unknown threats and integrating good security habits into everyday business situations. This book provides clear guidance on how to identify weaknesses, assess possible threats, and implement effective policies. Recognizing that an organization’s security is only as strong as its weakest link, this book offers specific strategies for employees at every level.

Drawing from her experience as CMO of one of the world’s largest cybersecurity companies, author Allison Cerra incorporates straightforward assessments, adaptable action plans, and many current examples to provide practical recommendations for cybersecurity policies. By demystifying cybersecurity and applying the central concepts to real-world business scenarios, this book will help you:

• Deploy cybersecurity measures using easy-to-follow methods and proven techniques
• Develop a practical security plan tailor-made for your specific needs
• Incorporate vital security practices into your everyday workflow quickly and efficiently

The ever-increasing connectivity of modern organizations, and their heavy use of cloud-based solutions present unique challenges: data breaches, malicious software infections, and cyberattacks have become commonplace and costly to organizations worldwide. The Cybersecurity Playbook is the invaluable guide to identifying security gaps, getting buy-in from the top, promoting effective daily security routines, and safeguarding vital resources. Strong cybersecurity is no longer the sole responsibility of IT departments, but that of every executive, manager, and employee.

Chapter 1 The Time I Ruined Easter 1

Lessons Learned the Hard Way 8

Additional Lessons for You 12

Who Was at Fault? 14

Remember This Crucial Element 15

Why Me? 16

Why You? 17

W.I.S.D.O.M. 19

Chapter 2 Mr./Ms. Cellophane 23

The New Kid on the Block 26

W.I.S.D.O.M. for the Board and CEO 38

Making Mr./Ms. Cellophane Visible 41

Chapter 3 “Good Morning, This is Your Wakeup Call.” 47

The Best Defense 54

W.I.S.D.O.M. for the Employee 59

Chapter 4 Stop the Line 69

The Internet of Terrorism 74

W.I.S.D.O.M. for the Product Developer 80

Chapter 5 Bridging the Gap 87

When Too Much of a Good Thing is Bad 90

It Wasn’t Always This Way 92

W.I.S.D.O.M. for HR Professionals 96

Chapter 6 Luck Favors the Prepared 109

BREACH! 112

Preparing for Battle 115

W.I.S.D.O.M. for the Marketer/Communicator 119

Chapter 7 Interesting Bedfellows 127

The More Things Change . . . 132

. . . the More They Stay the Same 137

W.I.S.D.O.M. for the Finance Professional 142

Chapter 8 Mr./Ms. Cellophane (Reprise) 147

A Picture is Worth a Thousand Words 149

Letting Go to Hold On 153

Assuming the Mantle 156

W.I.S.D.O.M. for the Cybersecurity Professional 158

Chapter 9 Experiencing a Culture of Security 169

Chapter 10 A Culture of Security for All 187

W.I.S.D.O.M. for the CEO/Board Member 191

W.I.S.D.O.M. for the Employee 191

W.I.S.D.O.M. for the Product Developer 192

W.I.S.D.O.M. for the HR Professional 192

W.I.S.D.O.M. for the Marketer/Communicator 193

W.I.S.D.O.M. for the Finance Professional 194

W.I.S.D.O.M. for the Cybersecurity Professional 198

Acknowledgments 201

About the Author 203

Index 205

ALLISON CERRA brings a practical approach to demystifying the confluence of significant technology trends—including mobility, cloud, big data, security, and collaboration—and signaling where these forces could lead cultures in the future. In 2015, Cerra joined the cybersecurity industry, where she marries her calling for marketing with a cause of educating unwitting participants in a virtual battle that is underestimated, if not ignored, by far too many.

It's a fact: hackers and cybercriminals often target unwitting employees to unleash havoc on a company. Unlike books that explore the technical aspects and complex configurations needed to optimize an organization's security, The Cybersecurity Playbook fills a gap in the literature to offer a practical, non-technical guide for boards, executives, managers, and employees. From McAfee (the company that protects many of the largest enterprises and governments and hundreds of millions of consumer devices around the world), this book explores the step-by-step procedures, and outlines an action plan for integrating proven security habits into everyday business situations. It skillfully details a set of prescriptions that can be put into place quickly so that all employees can be part of an organization's cybersecurity agenda and help keep hackers at bay.

Drawing on the experience of the author and interviews with a wide range of company leaders and employees, The Cybersecurity Playbook provides guidance in jargon-free language for identifying weaknesses, assessing possible threats, and implementing effective policies. In addition, the book details specific strategies for personnel at every level and various functions of an organization including CEOs, employees, product developers, HR professionals, marketers, and finance professionals.

Loaded with practical prescriptions for how every employee and leader can adopt sound cybersecurity behaviors, The Cybersecurity Playbook moves this complex topic from theory to action. Some tips seem deceptively simple but can have a significant impact on success. Other suggestions require more work but are ultimately worth the effort. In addition, the book is filled with illustrative, real-world examples that go a long way to crystallize cybersecurity procedures.

The Cybersecurity Playbook is the invaluable guide to identifying security gaps, getting buy-in from the top, promoting effective daily security routines, and safeguarding vital resources. A robust cybersecurity posture is no longer simply in the hands of IT departments, but relies on the actions of every executive, manager, and employee.

A NON-TECHNICAL GUIDE FOR DEFENDING YOUR ORGANIZATION AGAINST HACKERS

". . . If you're a generally nontechnical person, rest assured that I strive to give you sufficient education to understand the nuances of this thorny subject, without overwhelming you with technical details. If you're more technical than I am, while I won't dumb down this topic, I will provide prescriptions that every employee—technical or otherwise—can practice to protect her organization. Finally, if you are one of my cybersecurity brethren, I hope you read and enjoy this book as a glimpse into our world. Then, I want you to pass it along to your non-cybersecurity colleagues to recruit them in our fight." —From Chapter One

It seems not a day goes by without news of yet another cyberattack on a high-profile company. The ever-increasing connectivity of modern organizations and heavy use of cloud-based solutions continue to present unique challenges. Data breaches, malicious software infections, and cyberattacks cost organizations time, money, and reputation. The Cybersecurity Playbook is the non-technical guide for enhancing an organization's security. The cybersecurity procedures presented are written for all members of a company, no matter their level or position.

An organization is only as secure as its weakest link. Fortify your company's cybersecurity defenses by following the step-by-step procedures outlined in this invaluable guide.