Security Strategy: From Requirements to Reality

ISBN-13: 9781439827338 / Angielski / Miękka / 2010 / 346 str.

Bill Stackpole;Eric Oksendahl;¬Abar

Opis

Addressing the diminished understanding of the value of security on the executive side and a lack of good business processes on the security side, Security Strategy: From Requirements to Reality explains how to select, develop, and deploy the security strategy best suited to your organization. It clarifies the purpose and place of strategy in an information security program and arms security managers and practitioners with a set of security tactics to support the implementation of strategic planning initiatives, goals, and objectives. The book focuses on security strategy planning and execution to provide a clear and comprehensive look at the structures and tools needed to build a security program that enables and enhances business processes. Divided into two parts, the first part considers business strategy and the second part details specific tactics. The information in both sections will help security practitioners and mangers develop a viable synergy that will allow security to take its place as a valued partner and contributor to the success and profitability of the enterprise. Confusing strategies and tactics all too often keep organizations from properly implementing an effective information protection strategy. This versatile reference presents information in a way that makes it accessible and applicable to organizations of all sizes. Complete with checklists of the physical security requirements that organizations should consider when evaluating or designing facilities, it provides the tools and understanding to enable your company to achieve the operational efficiencies, cost reductions, and brand enhancements that are possible when an effective security strategy is put into action.

Recenzje

This book focuses on the process, objectives, and controls of security strategy. It consists of two sections: Strategy (6 chapters) and Tactics (8 chapters). The sections include strategy how-to’s and security tactics, which support the realization of security. The strategy portion is aimed at executives, whereas the tactics portion is geared toward security professionals. … The authors—both security veterans—share many personal anecdotes. They use relevant quotes and concisely illustrate their points. The book addresses security quality attributes promoted by the Architecture Tradeoff Analysis Method (ATAM) and used in the Sherwood Applied Business Security Architecture (SABSA) framework … .
—A. Marlen, Reviews.com

Spis treści

STRATEGY. An Introduction. Getting to the Big Picture. Testing the Consumer. Strategic Framework (Inputs to Strategic Planning). Developing a Strategic Planning Process. Gates, Geeks, and Guards (Security Convergence). TACTICS. Tactics: An Introduction. Layer upon Layer (Defense in Depth). Did You See That?! (Observation). Trust but Verify (Accountability). SDL and Incident Response. Keep Your Enemies Closer. Hire a Hessian (Outsourcing). Security Awareness Training. Appendix: Physical Security Checklists.