Cybersecurity First Principles: A Reboot of Strategy and Tactics

"I often tell individuals just starting in cyber that if they want to understand what is going on, go listen to Rick." -- Mark McLaughlin, Former President, CEO and Chairman of the Board, Palo Alto Networks "Rick Howard has been at the forefront of cybersecurity since it existed as a profession. In Cybersecurity First Principles, he not only educates but also entertains; something only the truly accomplished can achieve." -- Jack Freund, Co-Author of "Measuring and Managing Information Risk: A Fair Approach" "Strategic thinking is critical to our success in securing our organizations. This book is an invaluable roadmap for how to approach cybersecurity strategically by an absolute legend in our industry." -- George Finney, author of "Project Zero Trust: A Story about a Strategy for Aligning Security and the Business" Since the 1970s, infosec practitioners have been incrementally improving the overall security landscape without ever taking a moment to consider if they were going in the right strategic direction in the first place. The author makes the case that they weren‘t. The general direction wasn‘t wrong per se, but the thought leaders in the space never got to the root of the problem. Retracing the footsteps of scientific thought leaders like Descartes and Elon Musk, this book makes the case for the ultimate cybersecurity first principle and outlines the strategies and tactics necessary to pursue it. A reboot of infosec strategy and tactics, this book explains: * Why a first principle approach is necessary * Five strategies that emerge because of it: Zero Trust, Intrusion Kill Chain Prevention, Resilience, Automation and Risk Forecasting * Hands-on tactics to achieve each strategy