Information Security Management Handbook, Sixth Edition, Volume 4

by Tipton; Harold F.

• ISBN13: 9781439819029
• ISBN10: 1439819025
• eBook ISBN(s): 9781439858868
• Edition: 6th
• Format: Hardcover
• Copyright: 2010-06-22
• Publisher: Auerbach Public
• More Book Details

Summary

Every year, in response to advancements in technology and new laws in different countries and regions, there are many changes and updates to the body of knowledge required of IT security professionals. Updated annually to keep up with the increasingly fast pace of change in the field, the Information Security Management Handbook is the single most comprehensive and up-to-date resource on information security and assurance.Providing an up-to-date compilation of the fundamental skills, techniques, tools, and understanding required of IT security professionals, the Information Security Management Handbook , Sixth Edition, Volume 4 reflects the latest changes to information security and the CISSP ® Common Body of Knowledge (CBK ® ). This edition updates the benchmark Volume 1 with a wealth of new information on mobile device security, adaptive threat defense, Web 2.0, virtualization, data leakage, and governance. New material also addresses risk management, business continuity planning, disaster recovery planning, and cryptography.As the risks that threaten the security of our systems continue to evolve, it is imperative that those charged with protecting that information stay ahead of the curve. Also available in a fully searchable CD-ROM format, this comprehensive resource provides the up-to-date understanding required to keep you abreast of the latest developments, new vulnerabilities, and possible threats.

Table of Contents

Preface	p. ix
Editors	p. xi
Access Control
Access Control Administration
Back to the Future	p. 3
Telecommunications and Network Security
Communications and Network Security
Adaptive Threats and Defenses	p. 29
Achieving a Global Information Systems Transformation (GIST): Foundations for Infrastructure 2.0 via Standards-Based Interoperability: IF-MAP and Beyond	p. 45
A Primer on Demystifying U.S. Government Networks	p. 59
Network Attacks and Countermeasures
Antispam: Bayesian Filtering	p. 75
Information Security and Risk Management
Security Management Concepts and Principles
Measuring Information Security and Privacy Training and Awareness Effectiveness	p. 87
Managing Mobile Device Security	p. 107
Establishing an Information Security Program for Local Government	p. 127
Policies, Standards, Procedures, and Guidelines
A Business Case for ISO 27001 Certification	p. 141
Achieving PCI DSS Compliance: A Compliance Review	p. 149
Risk Management
Leveraging IT Control Frameworks for Compliance	p. 169
Rats in the Cellar and Bats in the Attic, "Not Enough Depth to My Security"	p. 179
The Outsourcing of IT: Seeing the Big Picture	p. 193
Understanding Information Risk Management	p. 209
The Sarbanes-Oxley Revolution: Hero or Hindrance	p. 219
Application Security
System Development Controls
Data Loss Prevention Program	p. 229
Data Reliability: Trusted Time Stamps	p. 245
Security in the .NET Framework	p. 259
Cryptography
Crypto Concepts, Methodologies, and Practices
Cryptography: A Unifying Principle in Compliance Programs	p. 281
Security Architecture and Design
Principles of Computer and Network Organizations, Architectures, and Designs
Best Practices in Virtualization Security	p. 291
Everything New Is Old Again	p. 325
Operations Security
Operations Controls
A Brief Summary of Warfare and Commercial Entities	p. 335
Information Destruction Requirements and Techniques	p. 347
Business Continuity Planning and Disaster Recovery Planning
Business Continuity Planning
Integrated Business Continuity Planning	p. 357
CERT/BERT: Community and Business Emergency Response	p. 397
Law, Regulations, Compliance, and Investigation
Major Categories of Computer Crime
Cyberstalking	p. 413
Incident Handling
Is Software Write Blocking a Viable Alternative to Hardware Write Blocking in Computer Forensics	p. 425
Physical Security
Elements of Physical Security
Protection of Sensitive Data	p. 449
Water Leakage and Flooding	p. 457
Site Selection and Facility Design Considerations	p. 463
An Overview of IP-Based Video Surveillance	p. 471
Index	p. 485
Information Security Management Handbook, Sixth Edition: Comprehensive Table of Contents	p. 495
Table of Contents provided by Ingram. All Rights Reserved.