So you want to write a book about AI and cybersecurity? [CSO Perspectives]

This book provides an introduction to security metrics, helping readers understand how to effectively measure and communicate the value of an information security program. It covers topics such as enabling investment planning and decision making, and offers practical advice for security professionals to improve their programs.

In this book, Rick Howard challenges the conventional wisdom of current cybersecurity best practices, strategy, and tactics. He argues that the profession needs to get back to first principles. The book explores the history of information security from the 1960s to the early 2020s, identifies the shortcomings of current approaches, and suggests what the infosec community should strive towards. It provides convincing arguments for the primary and fundamental principles of cybersecurity and discusses effective strategies and tactics such as Zero Trust, Intrusion Kill Chain Prevention, Resilience, Automation, and Risk Forecasting. The book also includes case studies like the 2015 OPM hack, the 2016 DNC Hack, and the 2019 Colonial Pipeline hack, analyzed through the lens of first principles.