Very nice book。 I am currently doing a masters in cyber security and data governance and it helped me to understand the fundamentals of cyber security。 this book was an easy to read you don't need to be an expert to understand this book Very nice book。 I am currently doing a masters in cyber security and data governance and it helped me to understand the fundamentals of cyber security。 this book was an easy to read you don't need to be an expert to understand this book 。。。more
Michala,
TL DR (too long didn't read) - If you or someone you know is interested in cyber security - buy this book!Full reviewIt's rare that I take the time to post a review - this book deserves one。 As soon as Jess posted that her new book was available off I placed my order as I'm often asked about resources to help get someone started in the field and I typically end up providing a list of websites and podcasts but rarely a book (depending upon the individual asking)。 Caveat - I only started and skimr TL DR (too long didn't read) - If you or someone you know is interested in cyber security - buy this book!Full reviewIt's rare that I take the time to post a review - this book deserves one。 As soon as Jess posted that her new book was available off I placed my order as I'm often asked about resources to help get someone started in the field and I typically end up providing a list of websites and podcasts but rarely a book (depending upon the individual asking)。 Caveat - I only started and skimread the book today so I may come back and update my review。Who should read this book?Those starting out - Her book is targeted at people starting out in their career and I'm delighted that there is now an excellent resource that I can feel confident in recommending it to those thinking about it as an option, or those who have taken first steps but not sure what to do next。 I'd personally like to see this as core reading for all teenagers upwards involved on the GCHQ/NCSC #CyberFirst scheme。 The seasoned professional - I've worked in cyber security for over 8 1/2 years and within the first chapter I learned something new about the history of cyber security ! In the absence of any books dedicated to coaching and mentoring cyber security professionals I also think this book fills a niche in supporting the relationship between coach/coachee and mentor/mentee。StructureThe book is divided into fourteen chapters grouped into five parts。 Part 1 consists of 2 chapters covering the 'what and why' of cybersecurity, part 2 is 1 chapter on technical side, part 3 is 3 chapters on the human side, part 4 is a mix of the physical side, cybersecurity controls, at work and home, with a chapter on nation states。 The final part is 4 chapters are dedicated to careers in cybersecurity and future of the field - chapter 13 is the must read for those starting out。What I like about itt1。 This is not an academic text; her style is an easy and accessible read when compared to something like cybok (core knowledge across domains for cyber。t2。 She starts out by exploding some myths, highlighting how cybersecurity is needed everywhere in today's world and highlighting one of the things that I personally love about this field - there is lots to learn, no two days are the same, there's no time to get bored!t3。 She makes the point early on that cybersecurity is really information security covering more than protecting computers - it's all about the information。t4。 As a black woman working in a predominately white male industry, I appreciate that she calls out the use of black=bad and white=good。 Language matters if we are to become a more diverse and inclusive profession。t5。 The emphasis on life long learning throughout the book with the final word being on 'keep a learning mindset'。 The final sentences on p228 are very powerful and I completely agree。 What I'd like more oft1。 On page 21 that covers professional ethics in regard to hacking, I'd have liked to see this expanded in regard to ALL roles early in the book。 It's not covered until page 199 - IMHO, integrity and operating to a professional code of ethics is, as crucial as curiosity and willingness to be a lifelong learner。t2。 Page 200 describes 'imposter syndrome' without using the phrase; I'd have liked this to be called out as it's something many of us in the field struggle with。t3。 The list of what employers want doesn't include 'mental resilience' - Whilst it is briefly alluded to in some of the case studies throughout the book, I do think that this is SUCH an important thing to call out early - especially for certain roles such as incident response。 Whilst I appreciate that we don't want to put people off the career; I think we owe it to people to be clear up front about developing strategies to cope with a high stress industry (see the CIISec Security Profession in 2019-20 annual survey report at https://www。ciisec。org/White_Papers)。t4。 A chapter, or section within the career chapter that covers Mentor/mentee relationships, the value to helping in career, how to fine one and also the value in membership of professional associations, e。g。 CIISec, ISC(2), ISACA。t5。 An appendix that provides sources of digital resources to support self-development, real world learning when starting from scratch, e。g。 some great stuff in Cybok, recommended books, websites, podcasts, professional security associations。 I appreciate that in some cases things go out of date, but a digital accompaniment to the book with Jess's favourite recommended go-to resources that is updated by Cygenta regularly would add more value for new entrants to the career。Should I buy this book?If you or someone you know is interested in getting into this field and wants to know more - absolutely。 Add it to your cart now!P。S。 p227 Nice to see FC's endorsement of the book 'Hyperfocus' by Chris Bailey which I'm a third of the way through at the moment。 。。。more