Which is the best book for cyber security beginners?

Security & GRC Process Management

Cyber Security for Beginners by Raef Meeuwisse10%

Social Engineering: The Science of Human Hacking by Christopher Hadnagy40%

Hacking for Beginners: A Step by Step Guide for you to Learn the Basics of Cybersecurity and Hacking by Ramon Nastase27%

Cybersecurity For Dummies by Joseph Steinberg15%

Big Breaches: Cybersecurity Lessons for Everyone by Neil Daswani, Moudy Elbayadi5%

Other (I will detail it comments)1%

290 PARTICIPANTS

2.9k views2 Upvotes2 Comments

Sort by:

Manager of Digital Security and Infrastructure in Energy and Utilitiesa year ago

Secrets and Lies. It's 20 years old, and does the best job of outlining the security mindset in

Vice President - Strategy, Digital and Innovation (SDI) in Banking2 years ago

CISSP All-in-One Exam Guide, Ninth Edition
by Fernando Maymi (Author), Shon Harris (Author)

Content you might like

Post-pandemic, will your team be working fully remote, in-person, or hybrid?

Remote26%

In-person27%

Hybrid46%

View Results

What workflow automation tool you use to automate your workflow? If possible comment your best use case and how AI will impact on workflow automations.

Zapier29%

KonnectzIT28%

IFTTT20%

Make (Integromat)7%

Other please specify14%

View Results

I’ve been digging into ways to strengthen Zero Trust on IBM i systems, especially as more orgs shift toward hybrid cloud. I’m curious, how are others approaching threat detection around shadow AI use and supplier exposure in these environments?

As part of our NYSE IPO prep, we’re debating how to communicate our system hardening efforts in regulatory disclosures (e.g., SEC Form 20-F, SFC).

Would you recommend sharing % compliance (e.g., “85% CIS Tier 2”) or sticking to qualitative descriptions of how we identify and mitigate risks? Also, do SFC/ISO 27001 expectations require full ISMS integration, or is a % model acceptable?

We’re preparing for an IPO on the NYSE as a Foreign Private Issuer and evaluating CIS Benchmarks to measure OS and database hardening.

Our proposed tiers:
• Tier 1 (70–80%) baseline
• Tier 2 (85–90%) for sensitive data
• Tier 3 (95–100%) for mission-critical systems

Is 80% compliance defensible for IPO due diligence with SEC or SFC? Should Tier 3 be considered mandatory for critical systems? And can compensating controls (e.g., PAM, microsegmentation) offset gaps in legacy environments?