Designing a HIPAA-Compliant Security Operations Center: A Guide to Detecting and Responding to Healthcare Breaches and Events
Autor Eric C. Thompsonen Limba Engleză Paperback – 26 feb 2020
Healthcare entities are bombarded with data. Threat intelligence feeds, news updates, and messages come rapidly and in many forms such as email, podcasts, and more. New vulnerabilities are found every day in applications, operating systems, and databases while older vulnerabilities remain exploitable. Add in the number of dashboards, alerts, and data points each information security tool provides and security teams find themselves swimming in oceans of data and unsure where to focus their energy. There is an urgent need to have a cohesive plan in place to cut through the noise and face these threats.
Cybersecurity operations do not require expensive tools or large capital investments. There are ways to capture the necessary data. Teams protecting data and supporting HIPAA compliance can do this. All that’s required is a plan—which author Eric Thompson provides in this book.
What You Will Learn
- Know what threat intelligence is and how you can make it useful
- Understand how effective vulnerability management extends beyond the risk scores provided by vendors
- Develop continuous monitoring on a budget
- Ensure that incident response is appropriate
- Help healthcare organizations comply with HIPAA
Who This Book Is For
Cybersecurity, privacy, and compliance professionals working for organizations responsible for creating, maintaining, storing, and protecting patient information.
Preț: 260.69 lei
Preț vechi: 325.87 lei
-20% Nou
Puncte Express: 391
Preț estimativ în valută:
49.89€ • 51.47$ • 42.22£
49.89€ • 51.47$ • 42.22£
Carte disponibilă
Livrare economică 12-26 februarie
Preluare comenzi: 021 569.72.76
Specificații
ISBN-13: 9781484256077
ISBN-10: 1484256077
Pagini: 231
Ilustrații: XVIII, 231 p. 136 illus.
Dimensiuni: 178 x 254 mm
Greutate: 0.49 kg
Ediția:1st ed.
Editura: Apress
Colecția Apress
Locul publicării:Berkeley, CA, United States
ISBN-10: 1484256077
Pagini: 231
Ilustrații: XVIII, 231 p. 136 illus.
Dimensiuni: 178 x 254 mm
Greutate: 0.49 kg
Ediția:1st ed.
Editura: Apress
Colecția Apress
Locul publicării:Berkeley, CA, United States
Cuprins
Chapter 1: Security Operations: The Why and the Roadmap.- Chapter 2: HIPAA Security Rule and Cybersecurity Operations.- Chapter 3: Threat Intelligence.- Chapter 4: Vulnerability Management.- Chapter 5: Continuous Monitoring.- Chapter 6: Incident Response.- Chapter 7: Threat Hunting.- Chapter 8: Where to Go from Here.-
Notă biografică
Eric C. Thompson is the author of two previous Apress books: Building a HIPAA Compliant Cybersecurity Program and Cybersecurity Incident Response. He is certified by GIAC in intrusion analysis, incident handling, network forensics, and detection. He is currently Director of Information Security and IT Compliance at Blue Health Intelligence, a company focused on data analytics in the healthcare payer space. He has Implemented and matured all elements of security operations. He is a passionate user of many open-source solutions and loves working with new implementations of Snort, Zeek, and SOF-ELK. He also has significant experience assessing and managing cyber risks and complying with HIPAA.
Textul de pe ultima copertă
Develop a comprehensive plan for building a HIPAA-compliant security operations center, designed to detect and respond to an increasing number of healthcare data breaches and events. Using risk analysis, assessment, and management data combined with knowledge of cybersecurity program maturity, this book gives you the tools you need to operationalize threat intelligence, vulnerability management, security monitoring, and incident response processes to effectively meet the challenges presented by healthcare’s current threats.
Healthcare entities are bombarded with data. Threat intelligence feeds, news updates, and messages come rapidly and in many forms such as email, podcasts, and more. New vulnerabilities are found every day in applications, operating systems, and databases while older vulnerabilities remain exploitable. Add in the number of dashboards, alerts, and data points each information security tool provides and security teams find themselves swimming in oceansof data and unsure where to focus their energy. There is an urgent need to have a cohesive plan in place to cut through the noise and face these threats.
Cybersecurity operations do not require expensive tools or large capital investments. There are ways to capture the necessary data. Teams protecting data and supporting HIPAA compliance can do this. All that’s required is a plan—which author Eric Thompson provides in this book.
You will:
Healthcare entities are bombarded with data. Threat intelligence feeds, news updates, and messages come rapidly and in many forms such as email, podcasts, and more. New vulnerabilities are found every day in applications, operating systems, and databases while older vulnerabilities remain exploitable. Add in the number of dashboards, alerts, and data points each information security tool provides and security teams find themselves swimming in oceansof data and unsure where to focus their energy. There is an urgent need to have a cohesive plan in place to cut through the noise and face these threats.
Cybersecurity operations do not require expensive tools or large capital investments. There are ways to capture the necessary data. Teams protecting data and supporting HIPAA compliance can do this. All that’s required is a plan—which author Eric Thompson provides in this book.
You will:
- Know what threat intelligence is and how you can make it useful
- Understand how effective vulnerability management extends beyond the risk scores provided by vendors
- Develop continuous monitoring on a budget
- Ensure that incident response is appropriate
- Help healthcare organizations comply with HIPAA
Caracteristici
Identifies technical and non-technical vulnerabilities, including assessing severity and providing remediation challenges and solutions Illustrates the value of open source tools (OpenVas, Snort, Zeek, Moloch, the Elastic Stack, and others) for entities with limited budgets Covers monitoring from perimeter to endpoint, with a focus on host-based tools, network analyzers, and IDS solutions Complements Thompson’s 2017 Apress book, Building a HIPAA-Compliant Cybersecurity Program