Security Program and Policies: Principles and Practices

Description

Everything you need to know about information security programs and policies, in one book Clearly explains all facets of InfoSec program and policy planning, development, deployment, and management Thoroughly updated for today''s challenges, laws, regulations, and best practices The perfect resource for anyone pursuing an information security management career In today''s dangerous world, failures in information security can be catastrophic. Organizations must protect themselves. Protection begins with comprehensive, realistic policies. This up-to-date guide will help you create, deploy, and manage them. Complete and easy to understand, it explains key concepts and techniques through real-life examples. You''ll master modern information security regulations and frameworks, and learn specific best-practice policies for key industry sectors, including finance, healthcare, online commerce, and small business. If you understand basic information security, you''re ready to succeed with this book. You''ll find projects, questions, exercises, examples, links to valuable easy-to-adapt information security policies...everything you need to implement a successful information security program. Sari Stern Greene, CISSP, CRISC, CISM, NSA/IAM, is an information security practitioner, author, and entrepreneur. She is passionate about the importance of protecting information and critical infrastructure. Sari founded Sage Data Security in 2002 and has amassed thousands of hours in the field working with a spectrum of technical, operational, and management personnel, as well as boards of directors, regulators, and service providers. Her first text was Tools and Techniques for Securing Microsoft Networks, commissioned by Microsoft to train its partner channel, which was soon followed by the first edition of Security Policies and Procedures: Principles and Practices. She is actively involved in the security community, and speaks regularly at security conferences and workshops. She has been quoted in The New York Times, Wall Street Journal, and on CNN, and CNBC. Since 2010, Sari has served as the chair of the annual Cybercrime Symposium. Learn how to � Establish program objectives, elements, domains, and governance � Understand policies, standards, procedures, guidelines, and plans--and the differences among them � Write policies in "plain language," with the right level of detail � Apply the Confidentiality, Integrity & Availability (CIA) security model � Use NIST resources and ISO/IEC 27000-series standards � Align security with business strategy � Define, inventory, and classify your information and systems � Systematically identify, prioritize, and manage InfoSec risks � Reduce "people-related" risks with role-based Security Education, Awareness, and Training (SETA) � Implement effective physical, environmental, communications, and operational security � Effectively manage access control � Secure the entire system development lifecycle � Respond to incidents and ensure continuity of operations � Comply with laws and regulations, including GLBA, HIPAA/HITECH, FISMA, state data security and notification rules, and PCI DSS

Get the book

Amazon.com

Search the book

eBay.com

Search the book

Other editions

• 

  Security Program and Policies: Principles and Practices

  • 2014-03-20
  • 648 pages
  • Ebook
  • Pearson IT Certification

Similar books

• 

  Developing Cybersecurity Programs and Policies

  By Omar Santos

  Whatever your current responsibilities, this guide will help you plan, manage, and lead cybersecurity–and safeguard all the assets that matter.

• 

  Building a Practical Information Security Program

  By Jason Andress, Mark Leary

  Mark Leary possesses over 30years of experience in security management and technical intelligence holding several positions of responsibility in IT security management for government agencies and commercial firms.

• 

  Information Security Program Guide: Company Policies, Departmental Procedures, IT Standards and Guidelines

  By I. T. Security Risk Manager

  This guide can be used to build a (NIST CSF) National Institute of Standards Cyber Security Framework; IT Security Program for any organization.

• 

  Complete Guide to Building an Information Security Program

  By David Rauschendorfer

  Below is a list of just a few of the items you will learn while reading this book, which will assist you in developing your information security program.

• 

  Information Security Policies, Procedures, and Standards: A Practitioner's Reference

  By Douglas J. Landoll

  This is an important distinction because no two organizations are exactly alike; therefore, no two sets of policies and procedures are going to be exactly alike.

• 

  Information Security Policies, Procedures, and Standards: Guidelines for Effective Information Security Management

  By Thomas R. Peltier

  Guidelines for Effective Information Security Management Thomas R. Peltier ... RADIUS Remote Authentication Dial-In User Service RAM Random Access Memory RARP Reverse Address Resolution Protocol RBOC Regional Bell Operating Companies ...

• 

  Security Policies and Implementation Issues: Print Bundle

  By Robert Johnson

  "This book offers a comprehensive, end-to-end view of information security policies and frameworks from the raw organizational mechanics of building to the psychology of implementation.

• 

  Writing Information Security Policies

  By Scott Barman

  Additionally, policies must include provisions for security awareness and enforcement while not impeding corporate goals. This book serves as a guide to writing and maintaining these all-important security policies.

• 

  Information Security: Policy, Processes, and Practices

  By Seymour Goodman, Detmar W. Straub, Richard Baskerville

  Wheeler's netenabled business innovation cycle and a strategic entrepreneurship perspective on the evolution of dynamic capabilities. Information Systems Research, 13, 1 (March). Zsidisin, G.A.; Ragatz, G.L.; and Melnyk, S.A. 2003.

• 

  Principles and Practices of Security Program and Policies

  By Nelson Saxton

  If you understand basic information security, you're ready to succeed with this book.