Abstract

A must-read for security professionals! Predict, withstand, recover from, and adapt to cyber threats.

A leading security expert provides a thorough explanation of "cyber resilience," from its overview to its practical application!

Today, the damage caused by cyberattacks is constantly expanding. Supply chains are becoming more complex, and the technological environment surrounding organizations is constantly changing. Furthermore, while the development of cloud computing and AI brings us great benefits, it is also creating new dependencies and risks.

In this era, even the best defensive measures cannot completely eliminate threats. Therefore, the key is to maintain social and economic functions, recover quickly, learn from the experience, and develop an even more resilient organization, while assuming that incidents will occur. This way of thinking is the essence of "cyber resilience."

This book begins with a definition of "cyber resilience" and brings together theory and practice, technology and organization, and people and governance, not as independent elements, but as a single system. For beginners, it serves as a map to get an overview of the whole picture, and for practitioners, it serves as a guide to return to when they are unsure of what to do.

Author’s Information

After graduating from the Faculty of Law with a degree in Law from a university, I completed a course in Fashion Design at a vocational school. I also have experience studying in the Department of Electrical Engineering at the Faculty of Engineering of a university (though I dropped out). Drawing on my knowledge spanning law, design, and engineering, I have held various positions including technical support, infrastructure construction and operation, security research, and cloud design, accumulating practical security experience in both the private and public sectors. At NEC, in particular, I served as a tech lead and evangelist for financial systems, responsible for technical oversight of systems for financial institutions and the dissemination of knowledge both internally and externally. At the Financial Services Agency, as a financial securities inspector, I engaged in inspections based on threat-based penetration testing (TLPT), and was involved in evaluating the detection and response capabilities of financial institutions through verification that simulated the tactics of real attackers. Furthermore, at the Digital Agency, I was responsible for all security tasks, and as a specific project, I led the security design of the backend system for "My Number Portal," contributing to ensuring security in a large-scale administrative service infrastructure.