CI/CD and releases for Product Managers
$20.90
Buy on AmazonSecurity for Product Managers
★★★★★ (1 customer review)
$20.90
Paperback · Reference price on Amazon.com, before applicable taxes.
Understand access, permissions and security risks in a digital product. Starting with sign-in, this book introduces sessions, tokens, OAuth, vulnerabilities and data protection, then relates them to product design and prioritization. It is written for Product Managers and Product Owners without previous cybersecurity or programming experience.
Buy on AmazonCategory: Technical Books for Product Managers
Account roles, shared links and connections to external tools all involve access decisions. A Product Manager needs to understand what an operation allows, which information it exposes and what a proposed security restriction changes for the user. Security for Product Managers introduces those concepts through situations found in digital products.
From sign-in to permissions and vulnerabilities
The book starts with what happens when a user signs in, then develops the mechanisms and risks that appear in discussions with Engineering and Security. Its scope includes:
- Passwords, sessions, cookies, tokens, JWT, MFA and SSO.
- Authentication, authorization, account roles and permissions.
- API keys, OAuth and OpenID Connect.
- OWASP concepts and vulnerabilities including broken access control, injection and XSS, alongside attacks such as credential stuffing.
- Dependencies, secrets, encryption, data protection and privacy.
Discuss security within product planning
The later discussion brings these concepts into Security by Design, threat modeling, GDPR and risk prioritization. The emphasis is on describing the implications of a choice for the product and examining the tension between access controls and the intended user experience.
The book is for Product Managers and Product Owners who take part in security conversations without a specialist background. It starts from the basics and does not require programming. Implementing authentication systems, configuring servers and correcting vulnerabilities in code are outside its scope.
1 review for Security for Product Managers
★★★★★
Lydia
A clear and practical guide to understanding security in digital products. It makes topics like authentication, authorization, vulnerabilities, and data protection much easier to grasp without overwhelming you with technical details. What I liked most is how it relates security decisions to everyday product management work. A good read for PMs who want to ask better questions and have more informed conversations with their engineering and security teams.
