The Ciso Handbook: A Practical Guide to Securing Your Company

ISBN-13: 9780849319525 / Angielski / Twarda / 2005 / 346 str.

Gentile Michael;Collete Ronald D;August Thomas D

Opis

The Chief Security Officer helps readers understand the emerging phenomenon of a position that combines the traditional security manager with one who protects information. It explains why a chief security officer is important and how security needs to be implemented in terms of identifying risk, developing a corporate policy, and implementing unified strategy for the protection of people, facilities, and information. This non-technical book examines risks associated with a lack of security and explains how to build a structure for examining and building unified security. The author reviews requirements for bringing disparate security domains together from theoretical and practical standpoints.

Spis treści

Assess 
Overview
Foundation Concepts
Critical Skills
Consultative Sales Skills
Critical Knowledge
Understanding Your Business
Understanding Risk
Understanding Your Enterprise Differentiators      
Understanding Your Legal and Regulatory Environment    
Understanding Your Organizational Structure       
Understanding Your Organizational Dynamics     
Enterprise Culture         
Understanding your Enterprise’s View of Technology        
Assessment Methodology         
Identifying your Program’s Primary Driver
Why Are You Here?                  
Stakeholders    
Identifying your External Drivers              
Other External Drivers   
Identifying your Internal Drivers   
Assessment Checklist  
Plan    
Overview           
Foundation Concepts    
Critical Skills    
Visioning          
Strategic Planning         
Negotiating       
Marketing         
Talent Assessment       
Critical Skills Summary 
Critical Knowledge        
ISC² Common Body of Knowledge [CBK] 
Other Security Industry Resources         
Planning Methodology   
Understanding your Program’s Mandate              
Determining Your Program’s Structure    
Centralized vs. Decentralized     
Security Pipeline           
Size of Your Program    
Security Program Structure Summary     
Determining Your Program’s Staffing       
Planning Summary        
Planning Checklist        
           
Design
Overview           
Foundation Concepts    
Critical Skills    
Critical Knowledge        
Methodology     
Preview
Security Document Development
Project Portfolio Development     
Communication Plan Development          
Incorporating your Enterprise Drivers       
Requirements   
Gap Analysis    
Building Security Policies, Standards, Procedures, And Guidelines           
Build Security Documents Summary      
Building the Security Project Portfolio     
Annual Portfolio Review 
Build the Communication Plan               
Chapter Summary         
Design Checklist           
Execute          
Overview           
Foundation Concepts    
Preview
Critical Skills    
Critical Knowledge        
Methodology     
Project Execution         
Administrative Cleanup  
Chapter Summary         
Report 
Overview           
Foundation Concepts    
Critical Skills    
Critical Knowledge        
Marketing         
Methodology     
Report Construction Process     
Determine Target Audience        
Delivery Mechanisms    
Chapter Summary         
           
The Final Phase         
Overview           
Back To the Beginning  
Parting Thoughts           
           
Appendix A      Design Chapter Worksheets    
Appendix B      Report Creation Process Worksheet   
Appendix C      Requirements Sample
Appendix D      SDLC Checklist           
Appendix E      Recommended Reading