Information Security and It Risk Management

by Agrawal, Manish; Campoe, Alex; Pierce, Eric

• ISBN13: 9781118335895
• ISBN10: 1118335899
• Edition: 1st
• Format: Paperback
• Copyright: 2014-04-21
• Publisher: Wiley

Summary

This new text provides students the knowledge and skills they will need to compete for and succeed in the information security roles they will encounter straight out of college.  This is accomplished by providing a hands-on immersion in essential system administration, service and application installation and configuration, security tool use, TIG implementation and reporting. 

It is designed for an introductory course on IS Security offered usually as an elective in IS departments in 2 and 4 year schools.  It is not designed for security certification courses.

Author Biography

Manish Agrawal recieved his PhD Information Systems from SUNY Buffalo in 2002 and?Bachelor and Master degrees in Electrical Engineering from the Indian Institute of Technology in Kanpur, India. He is an Associate Professor in the?Department of Information Systems and Decision Sciences at the University of South Florida. He currently teaches courses in business data communications, information security and web applications development.?He was the recipient of USF's university-wide award recognizing teaching excellence in 2006 and has published research in academic journals including Management Science, INFORMS Journal on Computing, Journal of Management Information Systems, IEEE Transactions on Software Engineering, Decision Support Systems and the Journal of Organizational Computing and Electronic Commerce. His research and teaching have been funded by the US National Science Foundation, the US Department of Justice, the Indo-US Science and Technology Forum and Sun Microsystems.

Table of Contents

CHAPTER 1 - INTRODUCTION  

CHAPTER 2 - SYSTEM ADMINISTRATION (PART 1)          

CHAPTER 3 - SYSTEM ADMINISTRATION (PART 2)          

CHAPTER 4 - THE BASIC INFORMATION SECURITY MODEL             

CHAPTER 5 - ASSET IDENTIFICATION AND CHARACTERIZATION               

CHAPTER 6 - THREATS AND VULNERABILITIES     

CHAPTER 7 - ENCRYPTION CONTROLS   

CHAPTER 8 - IDENTITY AND ACCESS MANAGEMENT        

CHAPTER 9 - HARDWARE AND SOFTWARE CONTROLS   

CHAPTER 10 - SHELL SCRIPTING               

CHAPTER 11 - INCIDENT HANDLING       

CHAPTER 12 - INCIDENT ANALYSIS          

CHAPTER 13 - POLICIES, STANDARDS, AND GUIDELINES               

CHAPTER 14 - IT RISK ANALYSIS AND RISK MANAGEMENT