PublishedMcgraw-Hill Book Co, September 2014 |
ISBN9780071821650 |
FormatSoftcover, 480 pages |
Dimensions23.1cm × 18.8cm × 2.5cm |
Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.
Best practices for protecting critical data and systemsInformation Assurance Handbook: Effective Computer Security and Risk Management Strategies discusses the tools and techniques required to prevent, detect, contain, correct, and recover from security breaches and other information assurance failures. This practical resource explains how to integrate information assurance into your enterprise planning in a non-technical manner. It leads you through building an IT strategy and offers anorganizational approach to identifying, implementing, and controlling information assurance initiatives for small businesses and global enterprises alike.
Common threats and vulnerabilities are described and applicable controls based on risk profiles are provided. Practical information assurance application examples are presented for select industries, including healthcare, retail, and industrial control systems. Chapter-endingcritical thinking exercises reinforce the material covered. An extensive list of scholarly works and international government standards is also provided in this detailed guide.
Comprehensive coverage includes:
Basic information assurance principles and concepts
Information assurance management system
Current practices, regulations, and plans
Impact of organizational structure
Asset management
Risk management and mitigation
Human resource assurance
Advantages of certification, accreditation, and assurance
Information assurance in system development and acquisition
Physical and environmental security controls
Information assurance awareness, training, and education
Access control
Information security monitoring tools and methods
Information assurance measurements and metrics
Incident handling and computer forensics
Business continuity management
Backup and restoration
Cloud computing and outsourcing strategies
Information assurance big data concerns