This sixth edition of Management of Information Security tightens its focus on the managerial aspects of information security, continues to expand the coverage of governance and compliance issues, and continues to reduce the coverage of foundational and technical components. While retaining enough foundational material to allow reinforcement of key concepts, this edition has fewer technical examples. This edition also contains updated in-depth discussions and Offline features, and additional coverage in key managerial areas: risk management, information security governance, access control models, and information security program assessment and metrics.
The material on personnel management has been consolidated and reorganized. Personnel placement, staffing, and credentials are now covered in Chapter 5, and employment practices are discussed in Chapter 9. Digital forensics is now covered in Chapter 2.
頁數:752
版次:第6版
年份:2019年
規格:平裝/彩色
ISBN:9789814834735
1. Introduction to Management of Information Security
2. Compliance: Law and Ethics
3. Governance and Strategic Planning for Security
4. Information Security Policy
5. Developing the Security Program
6. Risk Management: Identifying and Assessing Risk
7. Risk Management: Controlling Risk
8. Security Management Models
9. Security Management Practices
10. Planning for Contingencies
11. Security Maintenance
12. Protection Mechanisms