Explore
Information Security Governance Simplified
Todd Fitzgerald and Tom Peltier
2011
1 Ungluer has
Faved this Work
Login to Fave
Security practitioners must be able to build cost-effective security programs while also complying with government regulations. Information Security Governance Simplified: From the Boardroom to the Keyboard lays out these regulations in simple terms and explains how to use control frameworks to build an air-tight information security (IS) program and governance structure. Defining the leadership skills required by IS officers, the book examines the pros and cons of different reporting structures and highlights the various control frameworks available. It details the functions of the security department and considers the control areas, including physical, network, application, business continuity/disaster recover, and identity management. Todd Fitzgerald explains how to establish a solid foundation for building your security program and shares time-tested insights about what works and what doesn’t when building an IS program. Highlighting security considerations for managerial, technical, and operational controls, it provides helpful tips for selling your program to management. It also includes tools to help you create a workable IS charter and your own IS policies. Based on proven experience rather than theory, the book gives you the tools and real-world insight needed to secure your information while ensuring compliance with government regulations.
This book is included in DOAB.
Why read this book? Have your say.
You must be logged in to comment.
dozierjack
Rights Information
Are you the author or publisher of this work? If so, you can claim it as yours by registering as an Unglue.it rights holder.Downloads
This work has been downloaded 120 times via unglue.it ebook links.
- 120 - pdf (CC BY-NC-ND) at OAPEN Library.
Keywords
- BUSINESS/MANAGEMENT
- card
- Computer security
- Computing & information technology
- controls
- Data
- department
- Economics
- Economics, finance, business & management
- Identity
- Industry
- Information technology: general issues
- INFORMATIONSCIENCE
- InfoSECURITY
- IT Security
- ITECH
- Management
- Management of IT
- Microeconomics
- Payment
- program
- SCI-TECH
- Security Services
- STM
- System
Links
DOI: 10.1201/b11357Editions