The Rules of Security

Description

This book demystifies and explains a subject that affects every one of us in our private lives and at work. Security is a practical discipline concerned with safeguarding lives, property, information, wealth, reputations, and social wellbeing. It is the basis of civilised society. People, businesses, and nations cannot thrive in its absence, whereas the right kind of security frees us to live fulfilling lives.

But deciding what is needed, and then making it happen, is not easy. The threats to our security are complex and continually evolving, as criminals, hackers, terrorists, and hostile foreign states continually find new ways of staying one step ahead of us, their potential victims. At the same time, we are continually creating new vulnerabilities as we adopt new technologies and new ways of working. Those who do not understand the fundamentals of security, risk, and resilience open themselves, and those around them, to avoidable dangers, needless anxieties, and unnecessary costs. Inadequate security may leave them exposed to intolerable risks, while the wrong kind of security is expensive, intrusive, and ineffective.

In his essential new book, world-leading security expert Paul Martin sets out the ten most important guiding principles of protective security and resilience. Clearly expressed in the form of simple but powerful rules of thumb, their purpose is to help solve complicated problems for which there are no textbook solutions. The rules offer a powerful toolkit, designed to work in many different situations, including the cyber domain. When we are faced with novel problems requiring complex decisions, it is easy to focus on the wrong things. These rules remind us what really matters.

The psychological and behavioral aspects of security are key themes throughout the book. People lie at the heart of security. The criminals, terrorists, and hackers are social animals with complex emotions and psychological predispositions. So too are the victims of those attackers and the security practitioners who strive to protect us. The human dimension is therefore crucial to understanding security.

The Rules of Security will help anyone with an interest in their own security and that of their home, family, business, or society. It will be indispensable to those in positions of responsibility, allowing them to understand how best to protect their organization, people, and assets. It assumes no expert technical knowledge and explains the ideas in clear and simple terms. It will appeal to anyone with an interest in security. If you read only one book about security, it should be this one.

About the Author

Dr Paul Martin CBE is a security practitioner with thirty years' experience in the national security arena. During a career in UK government service from 1986 to 2013 he held a variety of senior positions and was awarded the CBE in 2013 for his services to defence. From 2013 to 2016 he was the Director of Security for the UK Parliament, with responsibility for the physical, personnel, and cyber security of both Houses. Paul was educated at the University of Cambridge, where he graduated in natural sciences and took a PhD in behavioural biology, and Stanford University, where he was Harkness Fellow in the Department of Psychiatry and Behavioral Sciences. He subsequently lectured and researched at the University of Cambridge and was a Fellow of Wolfson College Cambridge, before leaving academia to join government service.

Contributors:

Lord (Jonathan) Evans of Weardale, Director General of MI5 (2007–2013)

Reviews

"An impeccable and important work that security people can push into the hands of others [...] who want an authoritative, yet crisply-written book on security."

- Professional Security

"... a deceptively easy read in that there are ten bite-size takeaway nuggets of digestible information that will make you more aware, informed and alert. Where Martin scores heavily is in the authenticity he brings to the subject, making his set of ideas less of a management self-help book and more of a first step towards protecting your assets."

- Nick Smith, E & T Magazine

Table of contents

Foreword, Lord (Jonathan) Evans of Weardale, Director General of MI5 (2007–2013)
1: Rule 1: Security Rules
2: Rule 2: Risk is the Key
3: Rule 3: Think like an Attacker
4: Rule 4: There are Three Ways to Reduce Risk
5: Rule 5: Build Resilience
6: Rule 6: It's All About People
7: Rule 7: Everyone is Biased
8: Rule 8: Cyber is New Ways of Doing Old Things
9: Rule 9: Know What Good Looks Like
10: Rule 10: Know Who's in Charge