Information Security Management

Concepts and Practice

Bel G. Raggad

• Editorial: CRC Press
• Año: 2010
• ISBN:
  9781439882634
• Edición: 1
• Categoría: Business
• Categoría: Information Management

Information security cannot be effectively managed unless secure methods and standards are integrated into all phases of the information security life cycle. And, although the international community has been aggressively engaged in developing security standards for network and information security worldwide, there are few textbooks available that

Índice

• Front cover
• Contents
• Preface
• About the Author
• SECTION I: INTRODUCTION
• Chapter 1. Introduction to Information Security Management
• Chapter 2. Introduction to Management Concepts
• Chapter 3. The Information Security Life Cycle
• SECTION II: SECURITY PLAN
• Chapter 4. Security Plan
• Chapter 5. Security Policy
• Chapter 6. Business Continuity Planning
• SECTION III: SECURITY ANALYSIS
• Chapter 7. Security Risk Management
• Chapter 8. Continual Security: Integrated Fault-Event Analysis and Response Framework (IFEAR)
• Chapter 9. Active Security Assessment
• Chapter 10. System Availability
• SECTION IV: SECURITY DESIGN
• Chapter 11. Nominal Security Enhancement Design Based on ISO/IEC 27002
• Chapter 12. Technical Security Enhancement Based on ISO/IEC 27001
• SECTION V: SECURITY IMPLEMENTATION
• Chapter 13. Security Solutions
• Chapter 14. The Common Criteria
• SECTION VI: SECURITY REVIEW
• Chapter 15. Security Review throguh Security Audit
• Chapter 16. Privacy Rights, Information Technology, and HIPAA
• SECTION VII: CONTINUAL SECURITY
• Chapter 17. The Sarbanes-Oxley Act and IT Compliance
• Chapter 18. Cyberterrorism and Homeland Security
• Index
• Back cover