Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.Best practices for protecting critical data and systemsInformation Assurance Handbook: Effective Computer Security and Risk Management Strategies discusses the tools and techniques required to prevent, detect, contain, correct, and recover from security breaches and other information assurance failures. This practical resource explains how to integrate information assurance into your enterprise planning in a non-technical manner. It leads you through building an IT strategy and offers anorganizational approach to identifying, implementing, and controlling information assurance initiatives for small businesses and global enterprises alike.Common threats and vulnerabilities are described and applicable controls based on risk profiles are provided. Practical information assurance application examples are presented for select industries, including healthcare, retail, and industrial control systems. Chapter-endingcritical thinking exercises reinforce the material covered. An extensive list of scholarly works and international government standards is also provided in this detailed guide.Comprehensive coverage includes:Basic information assurance principles and conceptsInformation assurance management systemCurrent practices, regulations, and plansImpact of organizational structureAsset managementRisk management and mitigationHuman resource assuranceAdvantages of certification, accreditation, and assuranceInformation assurance in system development and acquisitionPhysical and environmental security controlsInformation assurance awareness, training, and educationAccess controlInformation security monitoring tools and methodsInformation assurance measurements and metricsIncident handling and computer forensicsBusiness continuity managementBackup and restorationCloud computing and outsourcing strategiesInformation assurance big data concerns
Les mer
A clear, actionable blueprint for securing the vital information and IT services of global organizations of all sizes, this essential guide contains invaluable best practices technically vetted by a panel of global security leaders.
Les mer
Part IInformation Security Infrastructure1:The Need for Information Security2:Concepts in Informaiton Security3:Assets, Threats, Vulnerabilities, Risks, and Controls4:Security Professionals and Organizations5:Information Security management System6:Implementing Information Security Strategy into Current Practices, Regulations, and PlansPart IIInformation Security Planning Process7:Approaches to Implementing Information Security8:Organizational Structure for Mananging Information Security9:Asset Management10:Information Security Risk Management11:Information Security Policy12:Human Resouce Security13:Certification, Accreditation, and AssurancePart IIIInformation Security Prevention Process14:Information Security in System Development15:Physical and Environmental Security Controls16:Information Security Awareness, Training, and Education17:Preventive Tools and Techniques18:Access ControlPart IVInformation Security Detection Process19:Information Security Monitoring Tools and Methods20:Information Security Measurements and MetricsPart VInformation Security Recovery Process21:Information Security Incident Handling22:Computer Forensics23:Business Continuity24:Backup and RestorationAppendices
Les mer

Produktdetaljer

ISBN
9780071821650
Publisert
2014-10-16
Utgiver
Vendor
McGraw-Hill Professional
Vekt
794 gr
Høyde
231 mm
Bredde
188 mm
Dybde
25 mm
Aldersnivå
P, 06
Språk
Product language
Engelsk
Format
Product format
Heftet
Antall sider
480

Biographical note

Corey D. Schou, Ph.D., is the University Professor of Informatics and the Associate Dean of the College of Business at Idaho State University. He has been involved in establishing computer security and information assurance training and standards for 25 years. His research interests include information assurance, ethics, privacy, and collaborative decision making. He was responsible for compiling and editing computer security standards and training materials for the Committee on National Security Systems (CNSS). Throughout his career, Dr. Schou has remained an active classroom teacher despite his research and service commitments. He is the founding director of the Informatics Research Institute and the National Information Assurance Training and Education Center (NIATEC) that was designated the National Center of Excellence in Information Assurance Education. In 1996, his research center was cited by the Information Systems Security Association (ISSA) for Outstanding Contributions to the Security Profession and he was selected as the Educator of the Year by the Federal Information Systems Security Educators Association (FISSEA). In 1997, the Masie Institute and TechLearn Consortium recognized his contributions to distance education. In 2001, Dr. Schou was honored by the International Information Systems Security Certification Consortium [(ISC)2] with the Tipton award for his work in professionalization of computer security and his development of the generally accepted common body of knowledge (CBK) used in the certification of information assurance professionals. Dr. Schou serves as the chair of the Colloquium for Information Systems Security Education (CISSE). Under his leadership, the Colloquium creates an environment for exchange and dialogue among leaders in government, industry, and academia concerning information security and information assurance education. In addition, he is the editor of Information Systems Security and serves on the board of several professional organizations.