Data Breaches Crisis and Opportunity

Why do some organizations emerge from a data breach unscathed, while others are badly damaged, or even collapse? How can you make smart choices to protect your organization before and after a data breach? This book exposes the high-octane world of data breach disclosure and response, where IT help desk staff have the power to save or destroy a company, and cutting-edge attorneys must often parachute in to save the day. You’ll watch as one of the world’s most experienced cybersecurity professionals dissects high-profile data breaches, reveals what happened, and reveals exactly what you can do to navigate a massive data breach -- quickly mitigating damage to your digital assets, finances, and organizational reputation.

Sherri Davidoff teaches through storytelling, making this book powerfully accessible and practically useful to everyone from the boardroom to the server closet. Along the way, she reveals what the press didn’t cover about attacks on ChoicePoint, TJ Maxx, Heartland, Target, Anthem, and many other leading organizations -- and presenting specific lessons you can start applying right now, regardless of your technical or business infrastructure.

Drawing on her immense personal experience with digital forensics, incident response, security awareness training, penetration testing, and web security assessment -- and her work teaching in venues from Black Hat to the Department of Defense -- Davidoff introduces today’s most comprehensive and practical framework for data breach response. You’ll discover:

• Critical turning points throughout data breach events, and how to respond to each of them
• How breach response lifecycles are changing: why classic incident response approaches are no longer sufficient, and what to do instead
• How internal politics can affect data breach response, and what to do about it
• How to read between the lines of public statements and notifications (or lack thereof)
• What you need to know about breaches in retail and other specific industries -- and the limitations of standards such as PCI/DSS
• How to protect against and recover from ransomware
• How to assess products and services such as Commercial Off-The-Shelf Breach Response, cybersecurity insurance, and crisis management services
• What you can do right now to make breach response less traumatic

• An insider’s guide offering a new, systematic, and practical framework for data breach response: finally, an accessible, comprehensive playbook for what to do when
• Built around in-depth and highly-specific case studies: what really happened at ChoicePoint, TJ Maxx, Heartland, Target, Anthem, Sony, Children's Hospital Boston, and more
• Identifies critical decision points in high-profile data breaches, and explores the risks and benefits of the choices that were made at the time
• Written by the hacker featured in the bestseller 'Breaking and Entering: The Extraordinary Story of a Hacker Called "Alien"

How to protect your organization against massive data breaches, and mitigate the financial and reputational consequences if they happen

• An insider’s guide offering a new, systematic, and practical framework for data breach response: finally, an accessible, comprehensive playbook for what to do when
• Built around in-depth and highly-specific case studies: what really happened at ChoicePoint, TJ Maxx, Heartland, Target, Anthem, Sony, Children's Hospital Boston, and more
• Identifies critical decision points in high-profile data breaches, and explores the risks and benefits of the choices that were made at the time

"Data breaches are inevitable. It is said that there are two types of companies: those that have had a data breach and those that don't yet know they have had one. In preparing for that inevitability, Data Breaches: Crisis and Opportunity is an invaluable guide to the history of some of the most significant data breaches, to what you can do to ensure your firm does not become another statistic and, in the event it does happen, to minimize the damage of that breach." -- Ben Rothke, RSA Book of the Month Selection

Protect Your Organization Against Massive Data Breaches and Their Consequences

Data breaches can be catastrophic, but they remain mysterious because victims don't want to talk about them. In Data Breaches, world-renowned cybersecurity expert Sherri Davidoff shines a light on these events, offering practical guidance for reducing risk and mitigating consequences. Reflecting extensive personal experience and lessons from the world's most damaging breaches, Davidoff identifies proven tactics for reducing damage caused by breaches and avoiding common mistakes that cause them to spiral out of control.

You'll learn how to manage data breaches as the true crises they are; minimize reputational damage and legal exposure; address unique challenges associated with health and payment card data; respond to hacktivism, ransomware, and cyber extortion; and prepare for the emerging battlefront of cloud-based breaches.

• Understand what you need to know about data breaches, the dark web, and markets for stolen data
• Limit damage by going beyond conventional incident response
• Navigate high-risk payment card breaches in the context of PCI DSS
• Assess and mitigate data breach risks associated with vendors and third-party suppliers
• Manage compliance requirements associated with healthcare and HIPAA
• Quickly respond to ransomware and data exposure cases
• Make better decisions about cyber insurance and maximize the value of your policy
• Reduce cloud risks and properly prepare for cloud-based data breaches

Data Breaches is indispensable for everyone involved in breach avoidance or response: executives, managers, IT staff, consultants, investigators, students, and more. Read it before a breach happens!

Register your book for convenient access to downloads, updates, and/or corrections as they become available. See inside book for details.