Practical information security management : a complete guide to planning and implementation / Tony Campbell.

Author/creator Campbell, Tony
Format Electronic
Publication[United States] : Apress, 2016.
Description1 online resource
Supplemental ContentEBSCOhost
Subjects
Computer security--Management.

Contents At a Glance; Contents; About the Author; About the Technical Reviewers; Acknowledgments; Introduction; Chapter 1: Evolution of a Profession; What's in a Name?; The Language of Security; CIA; Confidentiality; Integrity; Availability; Non-Repudiation; Threats and Vulnerabilities; Risk and Consequence; Glossary of Useful Terms; Chapter 2: Threats and Vulnerabilities; Threats; Hiding in Plain Sight; How Does Tor Work?; The Deep Web; Malware as a Service; Criminal Motivations and Capabilities; Physical Threats; Vulnerabilities; Technical Vulnerabilities; Non-Technical Vulnerabilities.
Contents Physical Vulnerabilities process Vulnerabilities; People Vulnerabilities; People Can Be Compromised; Chapter 3: The Information Security Manager; Information Security Job Roles; Training, Experience, and Professionalism; Career Planning with Professional and Academic Certifications; Getting Started in Security Management; The Information Security Manager's Responsibilities; The Information Security Management System; Chapter 4: Organizational Security; Security in Organizational Structures; Where Does Security Fit?; License to Operate: Get Your Guys Certified.
Contents Encourage a Culture of Security Awareness working with Specialist Groups; Working with Standards and Regulations; Working with Risk Management; Risk Identification; Risk Analysis; Qualitative Assessments; Quantitative Analysis; Risk Treatment; Risk Monitoring; Business Continuity Management and Disaster Planning; Working with Enterprise Architecture; Working with Facilities Management; Conclusion; Chapter 5: Information Security Implementation; Integration with Risk Management; The Language of Risk; Use Existing Frameworks; Secure Development; Security Architecture Awareness.
Contents Security Requirements organizational Interfaces; Post Implementation; Conclusion; Chapter 6: Standards, Frameworks, Guidelines, and Legislation; Why Do We Need Standards?; Legislation; Privacy; US-EU Safe Harbor and Privacy Shield; Employer and Employee Rights; Computer Fraud and Abuse Laws; US Computer Fraud and Abuse Act; UK Computer Misuse Act; Australia's Cybercrime Act; Records Retention; Intellectual Property and Copyright; The ISO/IEC 27000 Series of Standards; ISO/IEC 27001; Getting Certified; ISO/IEC 27002; ISO/IEC 27035; List of Published ISO/IEC 27000 Standards; Business Continuity.
Contents Risk Management Payment Card Industry Data Security Standard; Health Insurance Portability and Accountability Act; Conclusion; Chapter 7: Protection of Information; Information Classification; Business Impact Levels; Implementing Information Classification; Information Classification or Systems Classification?; Tactical Implementation; Strategic Implementation; Identification, Authentication, and Authorization; Access Control Models; System Privileges; Separation of Duties; Delegation of Privileges; Chapter 8: Protection of People; Human Vulnerabilities; Social Engineering.
Abstract This book provides a wealth of practical advice for anyone responsible for information security management in the workplace. Focusing on the 'how' rather than the 'what', Practical Information Security Management shows you how to create security-focused business propositions that consider the balance between cost, risk and usability. The book accompanies you on your journey as you set out on the path to become an information security manager, offering a wealth of background history that explains how the industry works today, looking at how you set up an effective infosec practice, hire the right people and strike the balance between security controls, costs and risk. Together we'll cut through the policies, regulations and standards to expose the real inner workings of what make a security management program effective, covering the full gamut of subject matter pertaining to security management: organizational structures, security architectures, technical controls, governance frameworks, and operational security matters. What You Will Learn: The practical aspects of being an effective information security manager How to strike the right balance between cost and risk How to take security policies and standards and make them work in reality How to leverage complex security functions, such as Digital Forensics, Incident Response and Security Architecture Who This Book is For: This is a book for anyone who wants to make a difference in offering effective security management for their business. You might already be a security manager seeking insight into areas of the job that you've not looked at before, or you might be a techie or risk guy wanting to switch into this challenging new career. Whatever your career goals are, Practical Information Security Management has something to offer you.
Access restrictionLicense restrictions may limit access.
Issued in other formPrinted edition: 9781484216842
Genre/formElectronic books.
Genre/formElectronic books.
ISBN9781484216859 (electronic bk.)
ISBN1484216857 (electronic bk.)
Standard identifier# 10.1007/978-1-4842-1685-9
Stock number974908 MIL

Availability

Library Location Call Number Status Item Actions
Electronic Resources Access Content Online ✔ Available