Despite the increase of high-profile hacks, record-breaking data leaks and ransomware attacks, many organizations donít have the budget to establish or outsource an information security (InfoSec) program, forcing them to learn on the job. for companies obliged to improvise, this pragmatic guide provides a security-101 handbook with steps, tools, processes and ideas to help you drive maximum-security improvement at little or no cost.Each chapter in this book provides step-by-step instructions for dealing with a specific issue, including breaches and disasters, compliance, network infrastructure and password management, vulnerability scanning and penetration testing, among others. Network engineers, system administrators and security professionals will learn tools and techniques to help improve security in sensible, manageable chunks.Learn fundamentals of starting or redesigning an InfoSec programCreate a base set of policies, standards and proceduresPlan and design incident response, disaster recovery, compliance and physical securityBolster Microsoft and Unix systems, network infrastructure and password managementUse segmentation practices and designs to compartmentalize your networkExplore automated process and tools for vulnerability managementSecurely develop code to reduce exploitable errorsUnderstand basic penetration testing concepts through purple teamingDelve into IDS, IPS, SOC, logging and monitoring