Download Information Security Governance (Wiley Series in Systems by Krag Brotby PDF

By Krag Brotby

The turning out to be critical desire for powerful details protection GovernanceWith monotonous regularity, headlines announce ever extra fantastic disasters of data safety and mounting losses. The succession of company debacles and dramatic keep watch over mess ups in recent times underscores the need for info protection to be tightly built-in into the material of each association. the safety of an organization's Most worthy asset info can not be relegated to low-level technical team of workers, yet needs to be thought of a vital section of company governance that's serious to organizational good fortune and survival.Written by way of an professional, info safety Governance is the 1st book-length therapy of this crucial subject, offering readers with a step by step method of constructing and handling an efficient details protection application. starting with a normal evaluate of governance, the ebook covers:The company case for info securityDefining roles and responsibilitiesDeveloping strategic metricsDetermining info defense outcomesSetting defense governance objectivesEstablishing threat administration objectivesDeveloping an economical defense strategyA pattern method developmentThe steps for enforcing an efficient strategyDeveloping significant safety application improvement metricsDesigning proper info safety administration metricsDefining incident administration and reaction metricsComplemented with motion plans and pattern rules that reveal to readers the best way to placed those principles into perform, info safeguard Governance is vital studying for any expert who's all for info protection and coverage.

Show description

Read Online or Download Information Security Governance (Wiley Series in Systems Engineering and Management) PDF

Best & telecommunications books

Telecom Crash Course

Get a valid repair at the increasing universe of telecomExplore the gigantic telecom panorama - from criteria and protocols to premise, entry and shipping applied sciences. excess of an acronym-studded speedy repair, Telecom Crash direction is a real educational that provides you context, connections, and the knowledge to speedy snatch key applied sciences, together with instant net, optical networking, 3G, IP, protocol layer, PSTN, ATM, unfold spectrum, GPRS, and SIP.

VOIP Technology Quick Guide

A finished but transportable VOIP expertise advisor for networking and telecom execs.

Essentials of Modern Spectrum Management (The Cambridge Wireless Essentials Series)

Are you totally up-to-speed on state-of-the-art glossy spectrum administration instruments? As regulators movement clear of conventional spectrum administration tools, introduce spectrum buying and selling and think about beginning up extra spectrum to commons, do you recognize the consequences of those advancements in your personal networks? This 2007 publication used to be the 1st to explain and assessment sleek spectrum administration instruments.

Extra resources for Information Security Governance (Wiley Series in Systems Engineering and Management)

Example text

We have previously used the ISACA definition of governance: The set of responsibilities and practices exercised by the board and executive management with the goal of providing strategic direction, ensuring that objectives are achieved, ascertaining that risks are managed appropriately, and verifying that the enterprise’s resources are used responsibly. [2] Having a definition of governance does not tell us how to get it or measure it but it does provide the basis for setting the objectives needed to achieve it.

In some organizations, many or all of these functions may be represented in an executive committee, in which case raising the issue at that level may provide an approach to providing a level of assurance integration. As with other aspects of security (and all) management, it will be necessary to define objectives for the desired level of assurance integration based on the desired outcomes. It will then be necessary to determine if that level has been achieved and establish a process to monitor and maintain ongoing integration.

Governance metrics are primarily navigational aids as opposed to performance measures and must provide information on strategic matters rather than management or operational issues, which are covered in Chapter 13. ” There are generally two types of metrics: quantitative and qualitative or some combinations of the two. Though there will be general discussion of the types and nature of metrics in this book as related to the various levels of governance, indepth analysis of metrics types, design, and deployment fills a separate volume by this author and is beyond the scope of this work.

Download PDF sample

Rated 4.39 of 5 – based on 33 votes