Cyber Security Policy Guidebook

Table of Contents

Cover

Title page

Copyright page

Foreword

Preface

Acknowledgments

1 Introduction

1.1 What Is Cyber Security?

1.2 What Is Cyber Security Policy?

1.3 Domains of Cyber Security Policy

1.4 Strategy versus Policy

2 Cyber Security Evolution

2.1 Productivity

2.2 Internet

2.3 e-Commerce

2.4 Countermeasures

2.5 Challenges

3 Cyber Security Objectives

3.1 Cyber Security Metrics

3.2 Security Management Goals

3.3 Counting Vulnerabilities

3.4 Security Frameworks

3.5 Security Policy Objectives

4 Guidance for Decision Makers

4.1 Tone at the Top

4.2 Policy as a Project

4.3 Cyber Security Management

4.4 Using the Catalog

5 The Catalog Approach

5.1 Catalog Format

5.2 Cyber Security Policy Taxonomy

6 Cyber Security Policy Catalog

6.1 Cyber Governance Issues

6.2 Cyber User Issues

6.3 Cyber Conflict Issues

6.4 Cyber Management Issues

6.5 Cyber Infrastructure Issues

7 One Government’s Approach to Cyber Security Policy

7.1 U.S. Federal Cyber Security Strategy

7.2 A Brief History of Cyber Security Public Policy Development in the U.S. Federal Government

7.3 The Rise of Cyber Crime

7.4 Espionage and Nation-State Actions

7.5 Policy Response to Growing Espionage Threats: U.S. Cyber Command

7.6 Congressional Action

7.7 Summary

8 Conclusion

Glossary

References

Index