Management of Information Security, International Edition - Tapa blanda

Unit I: INTRODUCTION. 1: Introduction to Management of Information Security. UNIT II: PLANNING. 2: Planning for Security. 3: Planning for Contingencies. UNIT III: POLICY AND PROGRAMS. 4: Security Policy. 5: Developing Security Programs. 6: Security Management Models. 7: Security Management Practices. UNIT IV: PROTECTION. 8: Risk Assessment. 9: Controlling Risk. 10: Protection Mechanisms. UNIT V: PEOPLE. 11: Personnel and Security. 12: Law and Ethics. Appendix A : NIST SP 800-26, Security Self-Assessment Guide for Information. Technology Systems and ISO 27002 Questionnaire. Appendix B : Risk Management Models.

Management of Information Security, International Edition primarily focuses on the managerial aspects of information security, such as access control models, information security governance, and information security program assessment and metrics. Coverage on the foundational and technical components of information security is included to reinforce key concepts. The third edition includes up-to-date information on changes in the field such as revised sections on national and international laws and international standards like the ISO 27000 series. With these updates, Management of Information Security continues to offer a unique overview of information security from a management perspective while maintaining a finger on the pulse of industry changes and academic relevance.