Security Risk Management: Building an Information Security Risk Management Program from the Ground Up (Paperback)
  • Security Risk Management: Building an Information Security Risk Management Program from the Ground Up (Paperback)
zoom

Security Risk Management: Building an Information Security Risk Management Program from the Ground Up (Paperback)

(author)
£36.99
Paperback 360 Pages / Published: 24/06/2011
  • We can order this

Usually dispatched within 3 weeks

  • This item has been added to your basket
Security Risk Management is the definitive guide for building or running an information security risk management program. This book teaches practical techniques that will be used on a daily basis, while also explaining the fundamentals so students understand the rationale behind these practices. It explains how to perform risk assessments for new IT projects, how to efficiently manage daily risk activities, and how to qualify the current risk level for presentation to executive level management. While other books focus entirely on risk analysis methods, this is the first comprehensive text for managing security risks. This book will help you to break free from the so-called best practices argument by articulating risk exposures in business terms. It includes case studies to provide hands-on experience using risk assessment tools to calculate the costs and benefits of any security investment. It explores each phase of the risk management lifecycle, focusing on policies and assessment processes that should be used to properly assess and mitigate risk. It also presents a roadmap for designing and implementing a security risk management program. This book will be a valuable resource for CISOs, security managers, IT managers, security consultants, IT auditors, security analysts, and students enrolled in information security/assurance college programs.

Publisher: Syngress Media,U.S.
ISBN: 9781597496155
Number of pages: 360
Weight: 700 g
Dimensions: 235 x 191 x 24 mm


MEDIA REVIEWS
"Evan Wheeler has developed a much needed new approach to the field of security risk management. Readers familiar with this field of study will find that it does what he says he wants it to do: shake the old risk paradigms out of their roots and plant something fresh and useful today."--Dennis Treece, Colonel, US Army (Retired)/Chief Security Officer, Massachusetts Port Authority-Boston "Wheeler's book is predominantly a practitioner's guide to security risk management but can also be used as a teaching text to help engineers, students of security, information assurance, or information systems more broadly. The key message that Wheeler is emphasizing is that risk is at the core of security, and at the heart of every business. Despite that the book lacks key referencing from academic literature, it can still be used as the basis for setting a large-scale team assignment on devising a risk management program from the ground up for a real organisation. Security professionals in banks will particularly find the book relevant."--Computers and Security "This book is packed with practical tips and the information contained throughout provides a good overview of the subject matter. The author explains the fundamentals of risk identification, assessment and management, exploring the differences between a vulnerability assessment and a risk assessment, and also providing rationales behind each of the subjects covered. This is not a technical book and the author generally avoids detailed technical analysis; rather it is an aide-memoir for Security Risk Management. ...his book is recommended, in particular, for those beginning a career in Risk Management. It also provides a useful reference for current risk professionals who perhaps could benefit from a book that helps refine and further improve their current skillset."--Best Governance and ISMS Books in InfoSecReviews Book Awards "Evan Wheeler's book, Security Risk Management, provides security and business continuity practitioners with the ability to thoroughly plan and build a solid security risk management program. The buzz words that are used throughout the corporate risk management industry today are often misused or overused. Wheeler breaks down such terms, translating them for the reader and articulating how they apply to a security risk management program. He believes risk managers should consider banning the term "best practices" from their vocabulary; he doesn't think one size fits all when creating a security risk management program... Building an information security risk management program from the ground up is a monumental task that requires various business units to react and adopt change to move a business forward. This book provides valuable information for security, IT, and business continuity professionals on creating such a program."--Security Management

You may also be interested in...

Hello World
Added to basket
£8.99
Paperback
The Cyber Effect
Added to basket
£10.99
Paperback
Dawn of the Code War
Added to basket
Cyberphobia
Added to basket
£9.99
Paperback
Cybersecurity Essentials
Added to basket
The Art of Deception
Added to basket
Hello World
Added to basket
£18.99
Hardback
Ghost in the Wires
Added to basket
Democracy Hacked
Added to basket
£16.99
Hardback
Data and Goliath
Added to basket
£12.99
Paperback
Cybersecurity and Cyberwar
Added to basket
Blockchain Basics
Added to basket
Cyber Smart
Added to basket
£15.99
Paperback

Please sign in to write a review

Your review has been submitted successfully.