Cyber Threat!: How to Manage the Growing Risk of Cyber Attacks

Praise for Cyber Threat! How to Manage the Growing Risk of Cyber Attacks Don Ulsch is one of those rare cyber security experts who understands not only the technical issues involved in dealing with all manner of cyber threats and risks, but he also has an extraordinarily profound and visionary understanding of the face and future of cyber threats. Anthony Kimery, Executive Editor, Homeland Security Today magazine If you think cyber–security is someone elses job, think again. This book makes the best case yet for why business executives need to sit up and take noticeyour companys future may depend on it. Andrew Briney, Founding Editor, Information Security magazine The author warns of threats, vulnerabilities, and reasons for action on the part of those responsible for safeguarding valuable assets against technological exploitation by adversaries. Executives, managers, security officers, and concerned citizens should follow this books proper advice and guidance in order to manage ever–changing risks in a volatile cyber environment. Maynard C. Anderson, Former Deputy Under Secretary of Defense (Security Policy) Dons book is a must–read for Corporate Executives and Directors to understand the broad implications of the cyber war being waged against American corporations. As one of the worlds leading hands–on practitioners in the space, Don offers insightful guidance and proven mitigation strategies for firms to consider to protect your corporation and the interests of your shareholders from a menace likely to be with us for some time to come. Thomas M. Wagner, Head of Business Continuity Management, The Direct Edge Stock Exchange, a BATS Global Markets Company By using an exclamation point in the title of his book, Cyber Threat! How to Manage the Growing Risk of Cyber Attacks , Don highlights how critical cybersecurity is to every senior executive. Once the domain of those with specialized scientific and technical skills, the rise of the Advanced Persistent Threat coming from cyberspace means that this risk must be made part of any organizations management calculus and woe to the CEO who disregards its importance. Dons book gives a clear and concise understanding that any executive can use to incorporate this risk management profile into their operational plans. Kenneth P. Mortensen, former Associate Deputy Attorney General, Privacy Civil Liberties, U.S. Department of Justice Businesses are now at grave risk from cyber–attacks that are being launched daily from all over the world by criminals, terrorists, and unfriendly nations. Don Ulsch has dedicated his life to understanding these threats, and Cyber Threat! is a clarion call to government and corporate leaders to recognize and tackle this virulent new form of warfare. Col. James L. Bullion, Executive, U.S. Army, DoD (retired)

Foreword Preface Acknowledgments Introduction What Every Current and Future Senior Executive Must Know about the Cyber Threat: A Perfect Digital Storm Is Forming Increasingly Sophisticated Attacks Mobile Devices at Higher Risk Security Experts Not Immune It Wasn′t Always Like This Without a Bang A Board Issue The Cyber Frankenstein Cometh Defining Success Section I The Cyber Threat to the Corporate Brand: How It Will Impact Your Company Chapter 1 Rise of Cyber Organized Crime and Its Global Impact Is Nothing Sacred? The Liberty Reserve Case: Money Laundering in the Digital Age The Corruption Factor Information Threat, Physical Threat Notes Chapter 2 Emergence of the Cyber Nation State and Technology Espionage: Red China Rising and Its Global Cyber Theft Strategy A Case of Cyber Espionage Conspiracy? According to the Select Committee... Notes Chapter 3 Cyber Al Qaeda Pose a Threat to Critical Infrastructure A Disabled America A New Age: Inspiring Terrorists and Terrorism A Call Heard Vaguely Attack upon Attack, No Peace in Sight Notes Section II Asking for Trouble: Corporate Vulnerabilities in the Digital Society—Prepare to Defend Yourself and Your Brand Chapter 4 What is the True Cost of a Cyber Attack? Cyber Attack Detection Sometimes Takes Years One of the First Questions: "How Much Will This Cost?" A Few Common Cost Factors What about Unreported Breaches? Cyber Attacks Result in a Wider Impact: The Community Notes Chapter 5 U.S. Cyber Public Policy: Don′t Rely on It to Protect the Brand No Guarantee with this Executive Order Government–Industry Cooperation: No Silver Bullet Defining Cyber Public Policy a Challenge Cold War II: The Cyber Chapter Is There a Silver Lining in an Attack? Note Chapter 6 Four Trends Driving Cyber Breaches and Increasing Corporate Risk: Technological, Cultural, Economic, and Geopolitical Shifts Technology Trend Loss of Situational Awareness: Distraction Culture Technology is a Dual–Edged Sword Note Chapter 7 Social Media and Digital Protests Social Media: A Tool for Disruption, a Model for Change Hacker Group Anonymous Anarchaos: In the Image of Anonymous Section III Protecting the Brand: Actions Executive Management Must Take to Reduce Cyber Risk Chapter 8 Managing the Brand When the Worst Case Occurs Chapter 9 Managing the Big Risk: Third–Party Vendors Background Investigation Suggestions to Improve Process Risk–Reinforced Service Level Agreement or RRSLA Chapter 10 Creating Executive Risk Councils Define the Goal of the Executive Risk Council Who Should Be Included in the Executive Risk Council? Chapter 11 Early Warnings: Something Bad is on the Way Technical Signals Are There––But You′ve Got to Look Know Who′s Inside the Enterprise What a Web We Weave ... When Surfing About the Author Index

MacDONNELL ULSCH is currently a managing director of cyber crime and breach response at a large international consulting firm. He is the author of the highly regarded book Threat! Managing Risk in a Hostile World. Mr. Ulsch has investigated many high–impact cyber breach and technology espionage cases and advises a diverse range of private–sector and government clients on the cyber threat, how to manage a cyber attack when it occurs, and how to reduce the risk impact of one. He has appeared on Fox News, ABC News, and other media outlets, and has been quoted in many publications, including academic and military studies.