The Complete Guide to Human Resources and the Law will help you navigate complex and potentially costly Human Resources issues. You'll know what to do (and what not to do) to avoid costly mistakes or oversights, confront HR problems - legally and effectively - and understand the rules. The Complete Guide to Human Resources and the Law offers fast, dependable, plain English legal guidance for HR-related situations from ADA accommodation, diversity training, and privacy issues to hiring and termination, employee benefit plans, compensation, and recordkeeping. It brings you the most up-to-date information as well as practical tips and checklists in a well-organized, easy-to-use resource. Previous Edition: Complete Guide to Human Resources and the Law, 2018 Edition ISBN 9781454899945
The Complete Guide to Cybersecurity Risks and Controls presents the fundamental concepts of information and communication technology (ICT) governance and control. In this book, you will learn how to create a working, practical control structure that will ensure the ongoing, day-to-day trustworthiness of ICT systems and data. The book explains how to establish systematic control functions and timely reporting procedures within a standard organizational framework and how to build auditable trust into the routine assurance of ICT operations. The book is based on the belief that ICT operation is a strategic governance issue rather than a technical concern. With the exponential growth of security breaches and the increasing dependency on external business partners to achieve organizational success, the effective use of ICT governance and enterprise-wide frameworks to guide the implementation of integrated security controls are critical in order to mitigate data theft. Surprisingly, many organizations do not have formal processes or policies to protect their assets from internal or external threats. The ICT governance and control process establishes a complete and correct set of managerial and technical control behaviors that ensures reliable monitoring and control of ICT operations. The body of knowledge for doing that is explained in this text. This body of knowledge process applies to all operational aspects of ICT responsibilities ranging from upper management policy making and planning, all the way down to basic technology operation.
The use of computers and other technology introduces a range of risks to electoral integrity. Cybersecurity for Elections explains how cybersecurity issues can compromise traditional aspects of elections, explores how cybersecurity interacts with the broader electoral environment, and offers principles for managing cybersecurity risks.
The first comprehensive guide to the design and implementation of security in 5G wireless networks and devices Security models for 3G and 4G networks based on Universal SIM cards worked very well. But they are not fully applicable to the unique security requirements of 5G networks. 5G will face additional challenges due to increased user privacy concerns, new trust and service models and requirements to support IoT and mission-critical applications. While multiple books already exist on 5G, this is the first to focus exclusively on security for the emerging 5G ecosystem. 5G networks are not only expected to be faster, but provide a backbone for many new services, such as IoT and the Industrial Internet. Those services will provide connectivity for everything from autonomous cars and UAVs to remote health monitoring through body-attached sensors, smart logistics through item tracking to remote diagnostics and preventive maintenance of equipment. Most services will be integrated with Cloud computing and novel concepts, such as mobile edge computing, which will require smooth and transparent communications between user devices, data centers and operator networks. Featuring contributions from an international team of experts at the forefront of 5G system design and security, this book: Provides priceless insights into the current and future threats to mobile networks and mechanisms to protect it Covers critical lifecycle functions and stages of 5G security and how to build an effective security architecture for 5G based mobile networks Addresses mobile network security based on network-centricity, device-centricity, information-centricity and people-centricity views Explores security considerations for all relative stakeholders of mobile networks, including mobile network operators, mobile network virtual operators, mobile users, wireless users, Internet-of things, and cybersecurity experts Providing a comprehensive guide to state-of-the-art in 5G security theory and practice, A Comprehensive Guide to 5G Security is an important working resource for researchers, engineers and business professionals working on 5G development and deployment.
With the recent debacle of cryptocurrency exchange FTX and the crypto trading company Alameda Research, the importance of comprehending the security and regulations of Web3, cryptocurrency, and blockchain projects has been magnified. To avoid similar economic and security failures in future Web3 projects, the book provides an essential guide that offers a comprehensive and systematic approach to addressing security concerns. Written by experts in tech and finance, it provides an objective, professional, and in-depth analysis of security and privacy issues associated with Web3 and blockchain projects. This book highlights the security related to foundational Web3 building blocks such as blockchain, crypto wallets, smart contracts, and token economics, and describes recommended security processes and procedures for Web3 application development such as DevSecOps, data analytics, and data authenticity via the oracle. Moreover, the book discusses the legal and regulatory aspects of Web3 and the reasons behind the failures of well-known Web3 projects. It also contains detailed case studies of web3 projects, analyses of the reasons for their failures, and some pending legal cases. This book is an excellent resource for a diverse range of readers, with particular appeal to web3 developers, architects, project owners, and cybersecurity professionals seeking to deepen their knowledge of Web3 security.
Comprehensive Preparedness Guide (CPG) 101 provides guidelines on developing emergency operations plans (EOP). It promotes a common understanding of the fundamentals of risk-informed planning and decision making to help planners examine a hazard or threat and produce integrated, coordinated, and synchronized plans. The goal of CPG 101 is to make the planning process routine across all phases of emergency management and for all homeland security mission areas. This Guide helps planners at all levels of government in their efforts to develop and maintain viable all-hazards, all-threats EOPs. Accomplished properly, planning provides a methodical way to engage the whole community in thinking through the life cycle of a potential crisis, determining required capabilities, and establishing a framework for roles and responsibilities. It shapes how a community envisions and shares a desired outcome, selects effective ways to achieve it, and communicates expected results. Each jurisdiction's plans must reflect what that community will do to address its specific risks with the unique resources it has or can obtain.
The Complete Guide for CISA Examination Preparation delivers complete coverage of every topic on the latest release of the Certified Information Systems Auditor (CISA) exam. The author is an IT security and auditing expert and the book covers all five exam domains. This effective self-study system features chapter learning objectives, in-depth explanations of each topic, and accurate practice questions. Each chapter includes exam tips that highlight key exam information, hands-on exercises, a summary that serves as a quick review, and end-of-chapter questions that simulate those on the actual exam. Designed to help candidates pass the CISA exam easily, it also serves as an ideal on-the-job reference. Richard E. Cascarino, MBA, CIA, CISM, CFE, CRMA, is well known in international auditing. Richard is a principal of Richard Cascarino & Associates. He has over 31 years’ experience in audit training and consulting. He is a regular speaker at national and international conferences and has presented courses throughout Africa, Europe, the Middle East and the USA. Richard is a Past President of the Institute of Internal Auditors in South Africa, was the founding Regional Director of the Southern African Region of the IIA-Inc. and is a member of ISACA, and the Association of Certified Fraud Examiners, where he is a member of the Board of Regents for Higher Education. Richard was Chairman of the Audit Committee of Gauteng cluster 2 (Premier's office, Shared Services and Health) in Johannesburg and is currently the Chairman of the Audit and Risk Committee of the Department of Public Enterprises in South Africa. Richard is also a visiting Lecturer at the University of the Witwatersrand, author of the book Internal Auditing: An Integrated Approach, now in its third edition. This book is extensively used as a university textbook worldwide. In addition, he is the author of the Auditor's Guide to IT Auditing, Second Edition and the book Corporate Fraud and Internal Control: A Framework for Prevention. He is also a contributor to all four editions of QFINANCE, the Ultimate Resource.
This is an essential resource for navigating the complex, high-stakes world of cybersecurity. It bridges the gap between foundational cybersecurity knowledge and its practical application in web application security. Designed for professionals who may lack formal training in cybersecurity or those seeking to update their skills, this book offers a crucial toolkit for defending against the rising tide of cyber threats. As web applications become central to our digital lives, understanding and countering web-based threats is imperative for IT professionals across various sectors. This book provides a structured learning path from basic security principles to advanced penetration testing techniques, tailored for both new and experienced cybersecurity practitioners. Explore the architecture of web applications and the common vulnerabilities as identified by industry leaders like OWASP. Gain practical skills in information gathering, vulnerability assessment, and the exploitation of security gaps. Master advanced tools such as Burp Suite and learn the intricacies of various attack strategies through real-world case studies. Dive into the integration of security practices into development processes with a detailed look at DevSecOps and secure coding practices. "Web Application PenTesting" is more than a technical manual—it is a guide designed to equip its readers with the analytical skills and knowledge to make informed security decisions, ensuring robust protection for digital assets in the face of evolving cyber threats. Whether you are an engineer, project manager, or technical leader, this book will empower you to fortify your web applications and contribute effectively to your organization’s cybersecurity efforts.
"The market size and strength of the major digital platform companies has invited international concern about how such firms should best be regulated to serve the interests of wider society, with a particular emphasis on the need for new anti-trust legislation. Using a normative innovation systems approach, this paper investigates how current anti-trust models may insufficiently address the value-extracting features of existing data-intensive and platform-oriented industry behaviour and business models. To do so, we employ the concept of economic rents to investigate how digital platforms create and extract value. Two forms of rent are elaborated: 'network monopoly rents' and 'algorithmic rents.' By identifying such rents more precisely, policymakers and researchers can better direct regulatory investigations, as well as broader industrial and innovation policy approaches, to shape the features of platform-driven digital markets"--
DESCRIPTION In an age where data breaches and privacy issues are growing, confidential computing offers a state-of-the-art solution. This technology helps organizations keep their most sensitive information safe, even against strong threats. Introduction to Confidential Computing provides a clear guide to this advanced cybersecurity technology. It explains why confidential computing is crucial for protecting sensitive data, covering key technologies, architectures, and frameworks. The book details remote attestation, which ensures computing environment integrity, and explores how confidential computing enhances AI training security. It also reviews solutions from major cloud providers, helping readers choose the right options. This book is perfect for anyone looking to boost their cybersecurity skills and stay ahead in data protection. By the end of this book, you will gain a thorough understanding of confidential computing and its impact on data security and privacy. You will be ready to assess and implement confidential computing solutions, safeguarding your organization's assets and meeting data privacy regulations. KEY FEATURES ● Comprehensive overview of confidential computing architectures and technologies. ● Guidance on leveraging confidential computing technologies for secure data processing and privacy protection. ● Learn how confidential computing ensures data privacy and protects AI model integrity through secure processing. WHAT YOU WILL LEARN ● Learn why confidential computing is crucial in today's digital world. ● Understand high-level architecture of various trusted execution environments implementations. ● Art of developing secure applications that can be deployed on TEE. ● Comprehend how remote attestation ensures the integrity of computing environments. ● Discover how RA-TLS could reshape the future of secure communications. ● Explore how confidential computing protects data and AI models. WHO THIS BOOK IS FOR This book is for software architects, security researchers, and developers to enhance application security using confidential computing. PhD candidates and postgraduates will explore TEEs, while AI/ML developers will understand how confidential AI protects data and models. TABLE OF CONTENTS 1. Vital Need for Confidential Computing 2. Trusted Execution Environments 3. Secure Application Development 4. Remote Attestation 5. Confidential Computing in Cloud 6. Confidential Artificial Intelligence 7. Prospects of Confidential Computing Appendix A: Enclave Initialization Instructions in Intel SGX Appendix B: Intel TDX Architectural Instructions Appendix C: Secure Boot Infrastructure Terminologies
