{"product_id":"the-weakest-link-isbn-9780262047494","title":"The Weakest Link","description":"\u003cb\u003eAn expert in cybersecurity lays out an evidence-based approach for assessing user cyber risk and achieving organizational cyber resilience.\u003c\/b\u003e\u003cbr\u003e\u003cbr\u003ePhishing is the single biggest threat to cybersecurity, persuading even experienced users to click on hyperlinks and attachments in emails that conceal malware. Phishing has been responsible for every major cyber breach, from the infamous Sony hack in 2014 to the 2017 hack of the Democratic National Committee and the more recent Colonial Pipleline breach. The cybersecurity community’s response has been intensive user training (often followed by user blaming), which has proven completely ineffective: the hacks keep coming. In \u003ci\u003eThe Weakest Link\u003c\/i\u003e, cybersecurity expert Arun Vishwanath offers a new, evidence-based approach for detecting and defending against phishing—an approach that doesn’t rely on continual training and retraining but provides a way to diagnose user vulnerability.\u003cbr\u003e \u003cbr\u003eVishwanath explains how organizations can build a culture of cyber safety. He presents a Cyber Risk Survey (CRS) to help managers understand which users are at risk and why. Underlying CRS is the Suspicion, Cognition, Automaticity Model (SCAM), which specifies the user thoughts and actions that lead to either deception by or detection of phishing come-ons. He describes in detail how to implement these frameworks, discussing relevant insights from cognitive and behavioral science, and then presents case studies of organizations that have successfully deployed the CRS to achieve cyber resilience. These range from a growing wealth management company with twenty regional offices to a small Pennsylvania nonprofit with forty-five employees.\u003cbr\u003e \u003cbr\u003e\u003ci\u003eThe Weakest Link\u003c\/i\u003e will revolutionize the way managers approach cyber security, replacing the current one-size-fits-all methodology with a strategy that targets specific user vulnerabilities.Acknowledgments vii\u003cbr\u003eIntroduction 1\u003cbr\u003e1 How Social Engineering Evolved 23\u003cbr\u003e2 What Makes Social Engineering Possible 41\u003cbr\u003e3 How CISOs Are Dealing with Social Engineering 65\u003cbr\u003e4 Why Do People Fall for Social Engineering? 89\u003cbr\u003e5 The Key Symptom 117\u003cbr\u003e6 Performing an Accurate Diagnosis 135\u003cbr\u003e7 Conducting a User Cyber Risk Assessment 159\u003cbr\u003e8 From Cyber Risk to Cyber Hygiene 179\u003cbr\u003e9 A Tale of Five Implementations 203\u003cbr\u003e10 Reversing the Social Engineer's Advantages 225\u003cbr\u003eNotes 247\"\u003ci\u003eThe Weakest Link\u003c\/i\u003e is a much-needed antidote to the current fad of endless security awareness training. It offers an alternative based on actual evidence, one that puts user understanding at the start of the process and cyber-resilience at the end.\"\u003cbr\u003e \u003cb\u003e—Bruce Schneier, author of \u003ci\u003eClick Here to Kill Everybody: Security and Survival in a Hyperconnected World\u003c\/i\u003e\u003c\/b\u003e\u003cbr\u003e \u003cbr\u003e“Phishing attacks won’t be going away anytime soon. \u003ci\u003eThe Weakest Link\u003c\/i\u003e gives a very actionable outline on how this problem can be addressed by any size organization. Focus especially on page 161 and follow that guide!”\u003cbr\u003e\u003cb\u003e—Christopher Hadnagy, CEO of Social-Engineer, LLC, Founder of the Social-Engineering Framework, Author of \u003ci\u003ePhishing Dark Waters and Human Hacking\u003c\/i\u003e, Professor of Social Engineering at University of Arizona\u003c\/b\u003e\u003cbr\u003e \u003cbr\u003e“Practical, engaging, and well-grounded. Arun truly understands the human element and its position in a complex socio-technical world. This work is an exceptional window into decades of experience and knowledge.”\u003cbr\u003e \u003cb\u003e—Si Pavitt, Head of Cyber Awareness, Behaviour, and Culture – UK Ministry of Defence\u003c\/b\u003e\u003cbr\u003e \u003cbr\u003e“A timely antidote to the ‘just train people more’ advice that pervades most approaches to the human side of cybersecurity. This book will help make your organization more cyber resilient!”\u003cbr\u003e \u003cb\u003e—Joseph M. Hatfield, United States Naval Academy\u003c\/b\u003eArun Vishwanath, a leading expert in cybersecurity, has held faculty positions at the University at Buffalo, Indiana University, and the Berkman Klein Center for Internet \u0026amp; Society at Harvard University. He has written on human cyber vulnerability and related topics for CNN, the \u003ci\u003eWashington Post\u003c\/i\u003e, and other major media. ","brand":"The MIT Press","offers":[{"title":"Default Title","offer_id":46303727812837,"sku":"NP9780262047494","price":29.95,"currency_code":"USD","in_stock":false}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1842\/7735\/files\/9780262047494.jpg?v=1767742161","url":"https:\/\/k12savings.com\/es\/products\/the-weakest-link-isbn-9780262047494","provider":"K12savings","version":"1.0","type":"link"}