Final Words on CyberSecurity

I believe that the general principles of cybersecurity covered in this book will remain the same in the foreseeable future. The three security goals of safeguarding availability, integrity, and confidentiality probably won’t change. You will always have to worry about external users and internal users.

This book describes a way to identify security issues that apply to your organization and provides examples of potential security measures. I hope that this book helps IT professionals relate security measures to security issues. This book should help you avoid getting stuck on the details of security technologies, see the big picture, and assess how vendor technologies fit your needs.

It’s important to note that cybersecurity involves not just having technologies, but using technologies the right way. You can buy the most expensive firewall in the market, but if it is not configured correctly, then it is not enhancing security. You can buy the most expensive cybersecurity monitoring system, but it may be looking for the wrong things.

Doing cybersecurity “right” is challenging. Cybersecurity is not just a concern of IT professionals of your organization, but requires the participation of all members of your organization and partners who share your IT resources. It’s not just about technologies; it’s also about expertise.

No matter what compliance standard concerns your organization, I hope that this book gives you a starting point to begin a cybersecurity or compliance programs.