Business Operations, Security Governance, Risk Management, and Enterprise Security Architecture
This collection of information security checklists provides a set of criteria against which an information security project can be measured. Additionally, the checklists in the book can be used to make sure you have all your Is dotted and your Ts crossed during an implementation project.
The checklists included are:
- 1 How the business works
1.1 General business modelling issues
1.2 Sales, market, and brand
1.3 Process, workflow, and results
1.4 Resources, transforms, value
1.5 Supply, inventory, transport
1.6 AR/AP, collections, write-offs
1.7 Infrastructures, services, users
1.8 Cost, shrinkage, collapse
2 Oversight
2.1 Duty to protect
2.2 Business continuity and disaster recovery
2.3 Generally Accepted Information Security Principles (GAISP) overall review
2.4 ISO 27002 (17799) governance board
2.5 Risk tolerance and thresholds
2.6 COSO
2.7 Feedback to governance
2.8 Capability maturity level
2.9 Budget source and cost chart
3 Business risk management
3.1 Risk evaluation
3.2 Interdependencies and risk aggregation
3.3 Risk treatment
3.4 Risk management architecture
3.5 What to protect and how well
3.6 Overall risk management process review
4 Enterprise security architecture
4.1 Overall picture
4.2 Fulfilling the duties to protect
4.3 Top management vs. chief information security officer (CISO) responsibilities
4.4 CISO-related responsibilities and groups
Key Features & Benefits:
- In-depth checklists for use during implementation projects are provided, helping organisations identify if anything is going wrong during their project.
- The checklists in this book have been designed to work in tandom with the CISO Toolkit Governance Guide and CISO Toolkit Security Metrics. Providing a fully featured set of tools for InfoSec professionals.
- For existing security management systems or programmes in place, the checklists can be used for measuring the systems/programmes effectiveness.
Author: Fred Cohen
Publisher: ASP Press
ISBN 10: 1878109375
ISBN 13: 9781878109378
Pages: 100
Format: Soft Cover
Published Date: 30 November 2005
Availability: In Stock
Ensure the effectiveness and quality of your information security system/programme using this series of checklists. Order today for immediate despatch!
Product Rating:     (0.00) # of Ratings: 0 (Only registered customers can rate)
There are no comments for this product.
|
|