Publisher's Synopsis
THIS IS THE 2019 CCPA UPDATE AND USE OF NIST SP 800-171, AN OPEN/NON-PROPRIETARY CYBER FRAMEWORK.Why should you buy this book? NIST 800-171 is one of several candidate frameworks that the California AG has recommended. Assuming the AG allows businesses to select an appropriate solution, NIST 800-171 is ideal. It is ideal because it is compact and structured specific to security controls already used by the federal government. The 2020 deadline is fast approaching, we have designed this version specific to your needs and the CCPA.In this 2019 Update to the original book, we have included information and changes affecting businesses attempting to meet the current CCPA deadlines.Understanding What the CCPA is and How to Effectively Apply the NIST 800-171 Security Framework.The California Consumer Privacy Act (CCPA) and NIST 800-171 designed to provide clear direction and understanding of how to implement the CCPA either in a business, agency or organization. The CCPA provides provisions specific to California residents and the companies regarding the 2018 compulsory law to protect personal information statewide. While NIST 800-series Cybersecurity publications tell a business "what" is required, they do not necessarily help in telling "how" to meet the 110 security control requirements in NIST 800-171. This book is also written to explain what the National Institute of Standards and Technology (NIST) 800-171 security controls require and how to meet them effectively for the purposes of CCPA compliance. And, will walk you and your IT staff through the security controls in enough detail to ensure a complete and "good faith" security effort has occurred.The author, Mr. Mark Russo was the former Senior Information Security Engineer within the Department of Defense's (DOD) F-35 Joint Strike Fighter program. He has an extensive background in cybersecurity and is an expert in the Risk Management Framework (RMF) and DOD Instruction 8510 which implements RMF throughout the DOD and the federal government. He holds several major cybersecurity certifications to include the Certified Information Systems Security Professional (CISSP) certification and a CISSP in information security architecture (ISSAP). He holds a 2017 certification as a Chief Information Security Officer (CISO) from the National Defense University, Washington, DC. He retired from the US Army Reserves in 2012 as the Senior Intelligence Officer.He is also the former Chief Information security Officer (CISO) at the Department of Education. During his tenure he led an aggressive effort to close over 95% of the outstanding US Congressional and Inspector General cybersecurity shortfall weaknesses spanning as far back as five years. He speaks regularly within the federal government and Intelligence Community on advanced topics regarding the evolution of cybersecurity in the 21st Century.
