Information Security Management: Concepts and Practice

Raggad, Bel G.

ISBN 10: 1420078542 / ISBN 13: 9781420078541

Editore: CRC Pr I Llc, 2010

Riguardo questo articolo

This book is in good condition. The cover has minor creases or bends. The binding is tight and pages are intact. Some pages may have writing or highlighting.

Codice articolo BRV.1420078542.G

Dati bibliografici

• Titolo: Information Security Management: Concepts and Practice
• Editore: CRC Pr I Llc
• Data di pubblicazione: 2010
• Lingua: Inglese
• ISBN 10: 1420078542
• ISBN 13: 9781420078541
• Rilegatura: Rilegato
• Condizione: good

Descrizione articolo

Riassunto

Information security cannot be effectively managed unless secure methods and standards are integrated into all phases of the information security life cycle. And, although the international community has been aggressively engaged in developing security standards for network and information security worldwide, there are few textbooks available that provide clear guidance on how to properly apply the new standards in conducting security audits and creating risk-driven information security programs.

An authoritative and practical classroom resource, Information Security Management: Concepts and Practice provides a general overview of security auditing before examining the various elements of the information security life cycle. It explains the ISO 17799 standard and walks readers through the steps of conducting a nominal security audit that conforms to the standard. The text also provides detailed guidance for conducting an in-depth technical security audit leading to certification against the 27001 standard. Topics addressed include cyber security, security risk assessments, privacy rights, HIPAA, SOX, intrusion detection systems, security testing activities, cyber terrorism, and vulnerability assessments.

This self-contained text is filled with review questions, workshops, and real-world examples that illustrate effective implementation and security auditing methodologies. It also includes a detailed security auditing methodology students can use to devise and implement effective risk-driven security programs that touch all phases of a computing environment―including the sequential stages needed to maintain virtually air-tight IS management systems that conform to the latest ISO standards.

Recensione

... a comprehensive overview of security topics related to the management and development of secure systems. This rich collection of literature reviews matches every stage of security management, implementation, and deployment. ... The extensive breakdown of risk analysis and threat assessment will be of particular interest to practitioners with background in this area... one of the most comprehensive works to date on the topic, and includes lengthy examples of how to determine and manage the risks associated with a new development project. The book describes most, if not all, security paradigms that are in practice today in terms of analyzing the goals of a project and establishing priorities. ... a valuable resource for anyone conducting research in the field of information security as well as for experienced managers seeking to concentrate on security in future endeavors. Summing Up: Highly recommended.
― T.D. Richardson, South University, in CHOICE, November 2010, Vol. 48 No. 03