Information protection playbook

The primary goal of the Information Protection Playbook is to serve as a comprehensive resource for information protection (IP) professionals who must provide adequate information security at a reasonable cost. It emphasizes a holistic view of IP: one that protects the applications, systems, and net...

Full description

Saved in:
Bibliographic Details
Format: Book
Language:English
Published: Oxford, UK Elsevier 2013
Subjects:
Tags: Add Tag
No Tags, Be the first to tag this record!

MARC

LEADER 00000nam a2200000 i 4500
001 100800
003 MY-KLNDU
005 20241220025558.0
008 221104 2013 xxka b 000 0 eng d
020 |a 9780124172326 
039 9 |a 202211041126  |b VLOAD  |c 201411271039  |d azraai  |c 201411271038  |d azraai  |y 201410132029  |z syarifuddin 
040 |a UPNM  |b eng  |c UPNM  |e rda 
090 |a QA 76.9.A25  |b I446 2013 
245 0 0 |a Information protection playbook  |c edited by Greg Kane, Lorna Koppel 
264 1 |a Oxford, UK  |b Elsevier  |c 2013 
300 |a xviii, 110 pages  |b illustrations  |c 23 cm 
336 |a text  |2 rdacontent 
337 |a unmediated  |2 rdamedia 
338 |a volume  |2 rdacarrier 
504 |a Includes bibliographical references 
505 0 |a Information protection function one : governance -- Information protection function two : program planning -- Information protection function three : risk management -- Information protection function four : incident response management -- Information protection function five : program administration. 
520 |a The primary goal of the Information Protection Playbook is to serve as a comprehensive resource for information protection (IP) professionals who must provide adequate information security at a reasonable cost. It emphasizes a holistic view of IP: one that protects the applications, systems, and networks that deliver business information from failures of confidentiality, integrity, availability, trust and accountability, and privacy. Using the guidelines provided in the Information Protection Playbook, security and information technology (IT) managers will learn how to implement the five functions of an IP framework: governance, program planning, risk management, incident response management, and program administration. These functions are based on a model promoted by the Information Systems Audit and Control Association (ISACA) and validated by thousands of Certified Information Security Managers. The five functions are further broken down into a series of objectives or milestones to be achieved in order to implement an IP framework. The extensive appendices included at the end of the book make for an excellent resource for the security or IT manager building an IP program from the ground up. They include, for example, a board of directors presentation complete with sample slides; an IP policy document checklist; a risk prioritization procedure matrix, which illustrates how to classify a threat based on a scale of high, medium, and low; a facility management self-assessment questionnaire; and a list of representative job descriptions for roles in IP. Emphasizes information protection guidelines that are driven by business objectives, laws, regulations, and industry standardsDraws from successful practices in global organizations, benchmarking, advice from a variety of subject-matter experts, and feedback from the organizations involved with the Security Executive CouncilIncludes 11 appendices full of the sample checklists, matrices, and forms that are discussed in the book. 
592 |a 00013809  |b 19/11/14  |c RM319.80  |h PVK 
650 0 |a Computer networks  |x Security measures 
650 0 |a Computer security 
650 0 |a Data protection 
700 1 |a Kane, Greg  |e editor of compilation 
700 1 |a Koppel, Lorna  |e editor of compilation 
999 |a vtls000052945  |c 100800  |d 100800