Management of Information Security

by Whitman, Michael E.; Mattord, Herbert J.

• ISBN13: 9781435488847
• ISBN10: 1435488849
• Edition: 3rd
• Format: Paperback
• Copyright: 2010-01-19
• Publisher: Course Technology

Summary

Management of Information Security primarily focuses on the managerial aspects of information security, such as access control models, information security governance, and information security program assessment and metrics. Coverage on the foundational and technical components of information security is included to reinforce key concepts. The third edition includes up-to-date information on changes in the field such as revised sections on national and international laws and international standards like the ISO 27000 series. With these updates, Management of Information Security continues to offer a unique overview of information security from a management perspective while maintaining a finger on the pulse of industry changes and academic relevance. Joseph Sherif, Fullerton University, "I can’t wait to adopt it. This book is the best for students and practitioners."

Table of Contents

Introduction

Introduction to Management of Information Security

Planning

Planning for Security

Planning for Contingencies

Policy And Programs

Security Policy

Developing Security Programs

Security Management Models

Security Management Practices

Protection

Risk Assessment

Controlling Risk

Protection Mechanisms

People

Personnel and Security

Law and Ethics

NIST SP 800-26, Security Self-Assessment Guide for Information

Technology Systems and ISO 27002 Questionnaire

Risk Management Models

Table of Contents provided by Publisher. All Rights Reserved.