Risk management for computer security : Protecting your network and information assets / by Andy Jones & Debi Ashenden.

Format:

Book

Author/Creator:

Jones, Andy, 1952-

Contributor:

Ashenden, Debi.

Language:

English

Subjects (All):

Industrial safety--Management.

Industrial safety.

Computer security.

Physical Description:

1 online resource (297 p.)

Edition:

1st ed.

Place of Publication:

Amsterdam, Netherlands ; Boston : Elsevier Butterworth-Heinemann, c2005.

Language Note:

English

Summary:

The information systems security (InfoSec) profession remains one of the fastest growing professions in the world today. With the advent of the Internet and its use as a method of conducting business, even more emphasis is being placed on InfoSec. However, there is an expanded field of threats that must be addressed by today's InfoSec and information assurance (IA) professionals. Operating within a global business environment with elements of a virtual workforce can create problems not experienced in the past. How do you assess the risk to the organization when information can be accessed,

Contents:

Front Cover; Risk Management for Computer Security; Copyright Page; Contents; Foreword; Preface; Acknowledgments; About the Authors; Section I: An Introduction to Risk Management; Chapter 1. Introduction to the Theories of Risk Management; Chapter 2. The Changing Environment; Chapter 3. The Art of Managing Risks; Section II: The Threat Assessment Process; Chapter 4. Threat Assessment and Its Input to Risk Assessment; Chapter 5. Threat Assessment Method; Chapter 6. Example Threat Assessment; Section III: Vulnerability Issues; Chapter 7. Operating System Vulnerabilities

Chapter 8. Application VulnerabilitiesChapter 9. Public Domain or Commercial Off-the-Shelf Software?; Chapter 10. Connectivity and Dependence; Section IV: The Risk Process; Chapter 11. What Is Risk Assessment?; Chapter 12. Risk Analysis; Chapter 13. Who Is Responsible?; Section V: Tools and Types of Risk Assessment; Chapter 14. Qualitative and Quantitative Risk Assessment; Chapter 15. Policies, Procedures, Plans, and Processes of Risk Management; Chapter 16. Tools and Techniques; Chapter 17. Integrated Risk Management; Section VI: Future Directions; Chapter 18. The Future of Risk Management

Index

Notes:

Description based upon print version of record.

Includes bibliographical references and index.

ISBN:

1-281-00683-1

9786611006839

0-08-049155-3

OCLC:

476060218