Table of Contents

Introduction Chapter 1: What Technology Giveth It Taketh Away Chapter 2: CyberAttack: It's a Dangerous World for Information Systems Chapter 3: The Human Factor: The Underrated Threat Chapter 4: Transition from an Environment of 'FUD' to a Standards-Based Environment Chapter 5: Establishing a Culture of CyberSecurity Chapter 6: Increasing Internationalism: Governance, Laws, and EthicsChapter 7: Standards: What Are They and Why Should We Care? Chapter 8: From CyberWar to CyberDefence: Applying Standards in an Environment of Change and Danger Chapter 9: Conclusion: Where Do We Go From Here? Appendix 1: Gap Analysis Areas of Interest Appendix 2: Standards Crosswalk Definitions Acronyms Index

About the Author

Dr Julie Mehan is a Principal Analyst for a strategic consulting firm in the State of Virginia. She has been a career Government Service employee, a strategic consultant, and an entrepreneur - which either demonstrates her flexibility or inability to hold on to a steady job! Until November 2007, she was the co-founder of a small woman-owned company focusing on secure, assured software modernization and security services. She led business operations, as well as the information technology governance and information assurance-related services, including certification and accreditation, systems security engineering process improvement, and information assurance strategic planning and programme management. During previous years, Dr Mehan delivered information assurance and security-related privacy services to senior department of defence, federal government, and commercial clients working in Italy, Australia, Canada, Belgium, and the United States.She served on the President's Partnership for Critical Infrastructure Security, Task Force on Interdependency and Vulnerability Assessments. Dr Mehan is Chair for the development of criteria for the International System Security Engineering Professional (ISSEP) certification, a voting board member for development of the International Systems Security Professional Certification Scheme (ISSPCS), and chair of the Systems Certification Working Group of the International Systems Security Engineers Association. She also serves as an Associate Professor at the University of Maryland University College, specializing in courses in Information Technology and Organizational Structure, and Ethics in Information Technology.Dr Mehan graduated summa cum laude (with highest honour) with a PhD from Capella University in Organization and Management, focusing her research into challenges facing Chief Security Officers in large government and commercial organizations and development of a dynamic model of Chief Security Officer leadership. She holds a Master of Arts with honours in International Relations and Law from Boston University and a Bachelor of Science degree in History and Languages from the University of New York. Dr Mehan was elected 2003 Woman of Distinction by the Women of Greater Washington and has published numerous articles including Framework for Reasoning About Security - A Comparison of the Concepts of Immunology and Security; System Dynamics, Criminal Behavior Theory and Computer-Enabled Crime; The Value of Information-Based Warfare To Affect Adversary Decision Cycles; and Information Operations in Kosovo: Mistakes, Misteps, and Missed Opportunities, released in Cyberwar 4.0. Dr Mehan is also fluent in German and has conversational skills in French and Italian.