A Practical Guide to Security Assessments

ISBN-13: 9780367393830 / Angielski / Miękka / 2019 / 520 str.

Sudhanshu Kairab

Opis

Taking a process-focused approach, A Practical Guide to Security Assessments presents a structured methodology for conducting assessments. The key element of the methodology is an understanding of business goals and processes, and how security measures are aligned with business risks. The guide also emphasizes that resulting security recommendations should be cost-effective and commensurate with the security risk. The methodology described serves as a foundation for building and maintaining an information security program. The book includes an appendix that contains questionnaires that can be modified and used to conduct security assessments.

Spis treści

Introduction. Evolution of information security. Information security program and how security assessments fit in. Planning. Initial Information gathering. Business process evaluation. Technology evaluation. Risk analysis and final presentation. Information security standards. Information security legislation. Appendix-Security questionnaires/checklists.

O autorze

Kairab, Sudhanshu