Management of information security / Michael E. Whitman and Herbert J.Mattord.
By: Whitman, Michael E [author.]
.
Contributor(s): Mattord, Herbert J [author.].
Material type: 
BookPublisher: Stamford, CT : Cengage Learning, 2014Edition: Fourth edition.Description: xxv, 566 pages : illustrations ; 23 cm.Content type: text Media type: unmediated Carrier type: volumeISBN: 9781285062297; 1285062299.Subject(s): Computer networks -- Security measures | Computer security | Information technology -- Security measures | Information technology -- ManagementDDC classification: 658.478 | Item type | Current library | Call number | Copy number | Status | Barcode | |
|---|---|---|---|---|---|---|
| General lending | MTU Bishopstown Library Lending | 658.478 (Browse shelf(Opens below)) | 1 | Available | 00163773 |
Enhanced descriptions from Syndetics:
MANAGEMENT OF INFORMATION SECURITY, Fourth Edition gives readers an overview of information security and assurance using both domestic and international standards, all from a management perspective. Beginning with the foundational and technical components of information security, this edition then focuses on access control models, information security governance, and information security program assessment and metrics.The Fourth Edition is revised and updated to reflect changes in the field, including the ISO 27000 series, so as to prepare readers to succeed in the workplace.
Includes bibliographical references and index.
Introduction to the management of information security -- Planning for security -- Planning for contingencies -- Information security policy -- Developing the security program -- Security management models -- Security management practices -- Risk management: Identifying and assessing risk -- Risk management: Controlling risk -- Protection mechanisms -- Personnel and security -- Law and ethics.
Management of information security, Fourth Edition gives readers an overview of information security and assurance using both domestic and international standards, all from a management perspective. Beginning with the foundational and technical components of information security, this edition then focuses on access control models, information security governance, and information security program assessment and metrics.The Fourth Edition is revised and updated to reflect changes in the field, including the ISO 27000 series, so as to prepare readers to succeed in the workplace.
CIT Module COMP9039 - Core reading.
Table of contents provided by Syndetics
- 1 Introduction to Management of Information Security
- 2 Planning for Security
- 3 Planning for Contingencies
- 4 Information Security Policy
- 5 Developing the Security Program
- 6 Security Management Models
- 7 Security Management Practices
- 8 Risk Management: Identifying and Assessing Risk
- 9 Risk Management: Controlling Risk
- 10 Protection Mechanisms
- 11 Personnel and Security
- 12 Law and Ethics
- Appendix A NIST SP 800-26, Security Self-Assessment Guide for Information
- Technology Systems and ISO 27002 Questionnaire
- Appendix B Risk Management Models