Defending the Digital Frontier: Practical Security for Management

ISBN-13: 9780471680871 / Angielski / Twarda / 2004 / 253 str.

Jan Babiak; John Butters; Mark W. Doll

Opis

Enhance the digital security knowledge-base within any organization

In today's competitive business environment, information and information technology have become crucial for a company's success. Ensuring the confidentiality of such information-financial, trade secrets, and the like-has become key. Defending the Digital Frontier, Second Edition describes where organizations are vulnerable and identifies protective measures that rely on people and process as much as technology. This book is a practical guide aimed at business leaders and executives, explaining why digital security is not a technical function, but a risk management operation, and illustrates an approach for creating an enterprise-wide security culture based on business-led risk-management principles.

Ernst & Young is a global leader in professional services, providing tax, assurance, and transaction advice to thousands of individuals as well as domestic and global businesses. Ernst & Young provides independent security solutions for some of the world's most information-intensive organizations, including numerous Fortune 500 companies, and the federal government.

Recenzje

the authors not only help readers explore the digital frontier but also empower them to identify, understand and assess these risks. ( Gulf Business, July 2005)

Spis treści

List of Figures and Tables.

Foreword.

Preface.

Acknowledgments.

PART ONE: THE CHALLENGE OF THE FRONTIER.

Chapter 1: Living at the Digital Frontier.

Chapter 3: Organisational Components and Security Objectives.

PART TWO: THE AGENDA FOR ACTION.

Chapter 4: The Security Agenda.

Chapter 5: The Security Life Cycle.

PART THREE: THE APPROACH FOR SAFETY.

Chapter 6: The Security Culture.

Chapter 7: The Risk Frontier.

Chapter 8: Road Map for Success.

Appendix A: Security–Related Laws and Regulations.

Appendix B: Threat Vectors.

Appendix C: Ernst & Young 2004 Digital Security Overview: An Executive Guide and Diagnostic.

Endnotes.

Glossary of Digital Security Terminology.

Index.

O autorze

Ernst & Young LLP (www.ey.com) provides assurance and advisory business services, tax services, and consulting for domestic and global clients. The firm has 30,000 employees in 87 U.S. cities. The practice is founder and producer of the Entrepreneur of the Year awards program, sponsored nationally by CNN and CNNfn, USA Today, the Nasdaq–Amex Market Group, and the Kauffman Center for Entrepreneurial Leadership at the Ewing Marion Kauffman Foundation.
Ernst & Young′s Entrepreneurial Services practice is dedicated to accelerating the success of the world′s best entrepreneurs.

Blurb

Defending the Digital Frontier, Second Edition

"The book recognizes, and correctly characterizes, digital security according to one of the fundamental tenets of IT governance: security, like IT governance, is a management issue, not a technical one. This book takes a very practical approach to a critical issue, and provides executive management with sound, cost–effective techniques grounded in business realities. Management and the C–suite will do well to keep these techniques in mind when formulating IT strategies that are aligned with and support business goals."
Marios Damianides CISA, CISM, CPA, CA, International President, Information Systems Audit and Control Association and IT Governance Institute

"Ernst & Young has done a superb job in demonstrating why the integrity of Digital Information Systems is fundamental to success. The authors show that protecting computers from attack is only a small part of this task. This book focuses on handling systemic risk and complexity the inevitable problems that arise when you integrate computerized information systems with human activity systems: namely the company itself, customers, suppliers, competitors, as well as the broader political and regulatory environment. I can recommend it as essential reading to all senior executives."
Ian Angell Professor of Information Systems, London School of Economics

"The CBI considers security of information to be a major issue for individuals and businesses in the growing digital world. This book makes clear, that the key to success in this new environment is in using technology effectively technology cannot make a badly organised business good, but it can make a good business better. Ernst & Young has identified critical organisational and management processes that global companies need to implement to ensure that technology effectively secures information assets that are at the heart of today′s economy."
Digby Jones Director General, CBI