Information Security

Note: Supplemental materials are not guaranteed with Rental or Used book purchases.

ISBN: 9781420013412 | 1420013416
Cover: Nonspecific Binding
Copyright: 4/19/2016

Rent

(Recommended)

$117.42

Term

Due

Price

Semester

Dec 12

$123.60

Quarter

Aug 13

$117.42

Short Term

Jul 31

$111.24

*This item is part of an exclusive publisher rental program and requires an additional convenience fee. This fee will be reflected in the shopping bag.
Buy New

Usually Ships in 3-5 Business Days

$158.24
eBook

Available Instantly

Online: 180 Days

Downloadable: 180 Days

*To support the delivery of the digital material to you, a digital delivery fee of $3.99 will be charged on each digital item.

$99.00*

Supplemental Materials

Evaluating and Measuring an Information Security Program
Information Security Risk Assessment Model (Isram™)
Background
Linkage
Risk Assessment Types
Relationship to Other Models and Standards
Terminology
Risk Assessment Relationship
Information Security Risk Assessment Model (ISRAM)
References
Global Information Security Assessment Methodology (Gisam™)
GISAM and ISRAM Relationship
GISAM Design Criteria
General Assessment Types
GISAM Components
References
Developing an Information Security Evaluation (Ise™) Process
The Culmination of ISRAM and GISAM
Business Process
A Security Baseline
KRI Security Baseline Controls
Security Baseline
Information Security Policy Document
Management Commitment to Information Security
Allocation of Information Security Responsibilities
Independent Review of Information Security
Identification of Risks Related to External Parties
Inventory of Assets
Classification Guidelines
Screening
Information Security Awareness, Education, and Training
Removal of Access Rights
Physical Security Perimeter
Protecting Against External and Environmental Threats
Secure Disposal or Reuse of Equipment
Documented Operating Procedures
Change Management
Segregation of Duties
System Acceptance
Controls against Malicious Code
Management of Removable Media
Information Handling Procedures
Physical Media in Transit
Electronic Commerce
Access Control Policy
User Registration
Segregation in Networks
Teleworking
Security Requirements Analysis and Specification
Policy on the Use of Cryptographic Controls
Protection of System Test Data
Control of Technical Vulnerabilities
Reporting Information Security Events
Including Information Security in the Business Continuity Process
Identification of Applicable Legislation
Data Protection and Privacy of Personal Information
Technical Compliance Checking
References
Background of the Iso/Iec 17799 Standard
History of the Standard
Internals of the Standard
Guidance for Use
High-Level Objectives
ISO/IEC Defined
References
Iso/Iec 17799:2005 Gap Analysis
Overview
Guidance for Use
General Changes
Security Policy
Organization of Information Security
Asset Management
Human Resources Security
Physical and Environmental Security
Communications and Operations Management
Access Control
Information Systems Acquisition, Development, and Maintenance
Information Security Incident Management
Business Continuity Management
Compliance
References
Analysis of Iso/Iec 17799:2005 (27002) Controls Security Policy
Information Security Policy
Summary
References
Organization of Information Security
Internal Organization
External Parties
Summary
References
Asset Management
Responsibility for Assets
Information Classification
Summary
References
Human Resources Security
Prior to Employment
During Employment
Termination or Change of Employment
Summary
References
Physical and Environmental Security
Secure Areas
Equipment Security
Summary
References
Communications and Operations Management
Operational Procedures and Responsibilities
Third-Party Service Delivery Management
System Planning and Acceptance
Protection against Malicious and Mobile Code
Backup
Network Security Management
Media Handling
Exchange of Information
Electronic Commerce Services
Monitoring
Summary
References
Access Control
Business Requirements for Access Control
User Access Management
User Responsibilities
Network Access Control
Operating System Access Control
Application and Information Access Control
Mobile Computing and Teleworking
Summary
References
Information Systems Acquisition, Development, and Maintenance
Security Requirements of Information Systems
Correct Processing in Applications
Cryptographic Controls
Security of System Files
Security in Development and Support Processes
Technical Vulnerability Management
Summary
References
Information Security Incident Management
Reporting Information Security Events and Weaknesses
Management of Information Security Incidents and Improvements
Summary
References
Business Continuity Management
Information Security Aspects of Business Continuity Management
Summary
References
Compliance
Compliance with Legal Requirements
Compliance with Security Policies and Standards, and Technical Compliance
Information Systems Audit Considerations
Summary
References
Iso Standards Cited in Iso/Iec 17799:2005
General References
Index
Table of Contents provided by Publisher. All Rights Reserved.

Please wait while the item is added to your bag...

FREE SHIPPING

Rent More, Save More! Use code: BBRENTAL

5% off 1 book, 7% off 2 books, 10% off 3+ books

Information Security

Table of Contents

Supplemental Materials

FREE SHIPPING

Rent More, Save More! Use code: BBRENTAL

5% off 1 book, 7% off 2 books, 10% off 3+ books

Information Security

Table of Contents

Supplemental Materials

Digital License