A Practical Guide to Security Assessments

ISBN-13: 9780849317064 / Angielski / Twarda / 2004 / 520 str.

Laurie Kelly; Sudhanshu Kairab

Opis

The modern dependence upon information technology and the corresponding information security regulations and requirements force companies to evaluate the security of their core business processes, mission critical data, and supporting IT environment. Combine this with a slowdown in IT spending resulting in justifications of every purchase, and security professionals are forced to scramble to find comprehensive and effective ways to assess their environment in order to discover and prioritize vulnerabilities, and to develop cost-effective solutions that show benefit to the business.A Practical Guide to Security Assessments is a process-focused approach that presents a structured methodology for conducting assessments. The key element of the methodology is an understanding of business goals and processes, and how security measures are aligned with business risks.

Spis treści

Introduction. Evolution of information security. Information security program and how security assessments fit in. Planning. Initial Information gathering. Business process evaluation. Technology evaluation. Risk analysis and final presentation. Information security standards. Information security legislation. Appendix-Security questionnaires/checklists.

O autorze

Kairab, Sudhanshu