More 11 The Kill Chain Kill Chain Principles Deconstructing the Cyber Kill Chain Other Models and Frameworks Applying Kill Chains to UIL 12 Total Quality Management Revisited TQM: In Search of Excellence Other Frameworks COVID-19 Remote Workforce Process Activated Applying Quality Principles
6 III: Countermeasures 13 Governance Defining the Scope of Governance for Our Purposes Traditional Governance Security and the Business Analyzing Processes Grandma's House 14 Technical Countermeasures Personnel Countermeasures Physical Countermeasures Operational Countermeasures Cybersecurity Countermeasures Nothing Is Perfect Putting It All Together 15 Creating Effective Awareness Programs What Is Effective Awareness? Governance as the Focus Where Awareness Strategically Fits in the Organization The Goal of Awareness Programs Changing Culture Defining Subcultures Interdepartmental Cooperation The Core of All Awareness Efforts Metrics Gamification Getting Management's Support Enforcement Experiment
7 IV: Applying Boom 16 Start with Boom What Are the Actions That Initiate UIL? Metrics Governance Awareness Feeding the Cycle Stopping Boom 17 Right of Boom Repeat as Necessary What Does Loss Initiation Look Like? What Are the Potential Losses? Preventing the Loss Detecting the Loss Mitigating the Loss Determining Where to Mitigate Avoiding Analysis Paralysis Your Last Line of Defense 18 Preventing Boom Why Are We Here? Reverse Engineering Step-by-Step 19 Determining the Most Effective Countermeasures Early Prevention vs. Response Start with Governance Prioritize Potential Loss Define Governance Thoroughly Matrix Technical Countermeasures Define Awareness It's Just a Start 20 Implementation Considerations You've Got Issues Business Case for a Human Security Officer It Won't Be Easy 21 If You Have Stupid Users, You Have a Stupid System A User Should Never Surprise You Perform Some More Research Start Somewhere Take Day Zero Metrics UIL Mitigation Is a Living Process Grow from Success The Users Are Your