This book is geared toward helping information security managers by providing concise guidance on assessing and improving an organization's security. It also addresses the needs of IT managers as they step into their first information security role. This book will help information security managers and IT managers respond in ways that meet the immediate needs and expectations of their organizations and to create and maintain a solid information security program.
The Information Security Manager's Checklist, A handy checklist of issues and considerations drawn from nationally and internationally recognized organizations and experts in the field provides important information to consider when developing or managing an information security program.
Information Security Self-Assessment Checklists, A set of detailed program assessment questions offers users the opportunity to compare a developing information security program against industry security standards. The checklist is used to help evaluate the state of information security in your organization, determine compliance, and, provide guidance on performing continuous improvement.
Technical and Managerial Details Boxes, Interspersed throughout the book, these sections highlight interesting topics and detailed technical issues, giving the reader the option of delving into selected topics more deeply.
Information Security Certification Guidelines, Key topics in the book are mapped to dominant professional certifications, the CISSP (Certified Information Systems Security Professional), SSCP (System Security Certified Professional), and the CISM (Certified Information Security Manager). This resource will facilitate review and study for those seeking certification
Part I: OVERVIEW OF THE SECURITY LANDSCAPE. 1. Introduction to the Roadmap to Information Security Roadmap. 2. Threats to Information Assets. 3. Attacks on Information Assets. Part II: STRATEGIC INFORMATION SECURITY: SECURITY GOVERNANCE. 4. Information Technology and Information Security Governance. 5. Information Security Roles and Responsibilities. 6. Positioning the Information Security Function. 7. Conducting an Information Security Assessment. Part III: STRATEGIC INFORMATION SECURITY: RISK MANAGEMENT. 8. Risk Management: Risk Identification. 9. Risk Management: Risk Assessment. 10. Risk Management: Risk Control. 11. Alternate Approaches to Risk Management. PART IV: STRATEGIC INFORMATION SECURITY: STANDARDS, REGULATIONS, LAW AND ETHICS. 12. Standards for Managing the Information Security Program. 13. Emerging Trends in Certification and Accreditation. 14. Dealing with Regulatory Compliance and Key Legal Issues. 15. Other Important Laws for Every IT/Security Manager. 16. Ethics in IT and Information Security. Part V: TACTICAL INFORMATION SECURITY: POLICIES AND PROGRAMS. 17. Information Security Policy: Development and Implementation. 18. Information Security Policy Types: EISP, ISSP, SysSP. 19. Employment Policies and Practices. 20. Implementing Security Education, Training, and Awareness Programs. Part VI: TACTICAL INFORMATION SECURITY: CONTINGENCY PLANNING. 21. Contingency Planning: Planning for the Worst. 22. The Incident Response Plan. 23. The Disaster Recovery Plan. 24. The Business Continuity Plan. Part VII: OPERATIONAL INFORMATION SECURITY: NETWORK SECURITY. 25. Communications and Operations Management. 26. Firewalls. 27. Protecting Remote Access. 28. Intrusion Detection Systems. 29. Scanning and Analysis Tools. Part VIII: OPERATIONAL INFORMATION SECURITY: CRYPTOGRAPHY AND ACCESS CONTROLS. 30. Cryptography in Theory. 31. Cryptography in Practice. 32. Access Controls and Biometrics. 33. Physical Security. Part IX: SUPPLEMENTAL MATERIALS. Appendix A: Information Security Self-Assessment Checklists. Appendix B: Information Security Certification Guidelines - The CISSP/SSCP. Appendix C: Information Security Certification Guidelines - The CISM.
Audience: Tertiary; University or College
Number Of Pages: 400
Published: 13th May 2011
Publisher: Cengage Learning, Inc
Country of Publication: US
Dimensions (cm): 22.23 x 17.78 x 2.54
Weight (kg): 0.79
Edition Number: 1
Edition Type: New edition