Information Security Cost Management

by Bazavan; Ioana V.

• ISBN13: 9780849392757
• ISBN10: 0849392756
• Edition: 1st
• Format: Hardcover
• Copyright: 2006-08-30
• Publisher: Auerbach Public

Summary

While information security is an ever-present challenge for all types of organizations today, most focus on providing security without addressing the necessities of staff, time, or budget in a practical manner.Information Security Cost Management offers a pragmatic approach to implementing information security, taking budgetary and real-world constraints into consideration. By providing frameworks, step-by-step processes, and project management breakdowns, this book demonstrates how to design the best security strategy with the resources you have available.Organized into five sections, the book-· Focuses on setting the right road map so that you can be most effective in your information security implementations· Discusses cost-effective staffing, the single biggest expense to the security organization· Presents practical ways to build and manage the documentation that details strategy, provides resources for operating annual audits, and illustrates how to advertise accomplishments to senior management effectively· Identifies high-risk areas, focusing limited resources on the most imminent and severe threats· Describes how to manage the key access controls when faced with manual user management, how to automate user management tasks in a cost effective manner, and how to deal with security breachesDemonstrating strategies to maximize a limited security budget without compromising the quality of risk management initiatives, Information Security Cost Management helps you save your organization time and money. It provides the tools required to implement policies, processes, and training that are crucial to the success of a company's security.

Table of Contents

Goals and filters	p. 3
Building your strategy	p. 11
The right people for the right jobs	p. 23
Sourcing solutions	p. 51
Policies, standards, and procedures	p. 63
Training and awareness	p. 81
Cost-effective audit management	p. 91
Reporting your value	p. 109
Risk assessment	p. 115
Security design review	p. 129
Exploit protection	p. 141
Identity and access management	p. 173
Cost-effective incident response	p. 221
Table of Contents provided by Blackwell. All Rights Reserved.