Using ‘The Art of War’ to Combat Cyber Crime
IT Governance has published a book on applying some of the principles in Sun Tzu’s The Art of War to the fight against cyber criminals. The new book, Assessing Information Security: Strategies, Tactics, Logic and Framework, claims that the principles that apply in warfare can also be brought to bear in the information security context.
The authors, Andrew Vladimirov, Konstantin Gavrilenko and Andriej Michajlowski, argue that “An information security professional is engaged in a form of continuous warfare which is defensive by its very nature. The aim of this ‘combat’ is not to give an inch of the protected ‘territory’ (data, systems, resources) to the adversaries. ”
In order to effectively implement good information security practices, companies need to establish something akin to a military strategy by establishing clear objectives and strategies.
Alan Calder, Chief Executive of IT Governance, said “Information security, like warfare, is not simply a question of ticking boxes on a checklist. A comprehensive plan and the latest technologies, although essential, do not in themselves guarantee success. Information security is ultimately a human problem. And, while human error is a factor, of course, the biggest threat is the criminal, deliberately and maliciously seeking to exploit your weaknesses.”
The book seeks to provide information security professionals with a conceptual alteration from the traditional approach to IT security.
“An information security professional is engaged in a form of continuous warfare which, by its very nature, is defensive. The aim of this ‘combat’ is not to give an inch of the protected ‘territory’ – whether data, systems or resources – to the adversaries,” said Dr. Vladimirov.
The book can be purchased here
Related posts:
1 Comment
Pings and Trackbacks