Information Security Policies, Procedures, and Standards: A Practitioner's Reference

ISBN-13: 9780367669966 / Angielski / Miękka / 2020 / 240 str.

Douglas J. Landoll

Opis

This book supplies a blueprint on how to develop effective information security policies and procedures. It uses standards such as NIST 800-53, ISO 27001, and COBIT, and regulations such as HIPAA and PCI DSS as the foundation for the content. Highlighting key terminology, policy development concepts and methods, and suggested document structures

Spis treści

Introduction. Information Security Policy Basics. Information Security Policy Framework. Information Security Policy Details. Information Security Procedures and Standards. Information Security Policy Projects. Appendices.

O autorze

Doug Landoll is an information security author, consultant, teacher, and business owner who always brings a unique mix of business strategy, technical know-how, and pragmatic approaches to current information security topics. When he is not performing risk assessments or writing policies, he is coming up with better approaches and methods and preparing for his next class or book. Mr. Landoll holds a CISSP, a computer science degree from James Madison University, and an MBA from the University of Texas, Austin. In 2013, Mr. Landoll was inducted as a Distinguished Fellow by the Information Systems Security Association (ISSA).