Enterprise Security Risk Management: Concepts and Applications

Description

As a security professional, have you found that you and others in your company do not always define “security” the same way? Perhaps security interests and business interests have become misaligned. Brian Allen and Rachelle Loyear offer a new approach: Enterprise Security Risk Management (ESRM). By viewing security through a risk management lens, ESRM can help make you and your security program successful. In their long-awaited book, based on years of practical experience and research, Brian Allen and Rachelle Loyear show you step-by-step how Enterprise Security Risk Management (ESRM) applies fundamental risk principles to manage all security risks. Whether the risks are informational, cyber, physical security, asset management, or business continuity, all are included in the holistic, all-encompassing ESRM approach which will move you from task-based to risk-based security. How is ESRM familiar? As a security professional, you may already practice some of the components of ESRM. Many of the concepts – such as risk identification, risk transfer and acceptance, crisis management, and incident response – will be well known to you. How is ESRM new? While many of the principles are familiar, the authors have identified few organizations that apply them in the comprehensive, holistic way that ESRM represents – and even fewer that communicate these principles effectively to key decision-makers. How is ESRM practical? ESRM offers you a straightforward, realistic, actionable approach to deal effectively with all the distinct types of security risks facing you as a security practitioner. ESRM is performed in a life cycle of risk management including: Asset assessment and prioritization. Risk assessment and prioritization. Risk treatment (mitigation). Continuous improvement. Throughout Enterprise Security Risk Management: Concepts and Applications, the authors give you the tools and materials that will help you advance you in the security field, no matter if you are a student, a newcomer, or a seasoned professional. Included are realistic case studies, questions to help you assess your own security program, thought-provoking discussion questions, useful figures and tables, and references for your further reading. By redefining how everyone thinks about the role of security in the enterprise, your security organization can focus on working in partnership with business leaders and other key stakeholders to identify and mitigate security risks. As you begin to use ESRM, following the instructions in this book, you will experience greater personal and professional satisfaction as a security professional – and you’ll become a recognized and trusted partner in the business-critical effort of protecting your enterprise and all its assets.

Get the book

Amazon.com

Search the book

eBay.com

Search the book

Other editions

• 

  Enterprise Security Risk Management: Concepts and Applications

  • 2017-05
  • 424 pages
  • Paperback
  • Rothstein Publishing
• 

  Enterprise Security Risk Management: Building a World-Class Asset Protection Program

  • 2018-01-01
  • 376 pages
  • Paperback
  • Butterworth-Heinemann

Similar books

• 

  The Manager’s Guide to Enterprise Security Risk Management: Essentials of Risk-Based Security

  By Brian J. Allen

  One answer might be that you need better best practices! In their new book, The Manager’s Guide to Enterprise Security Risk Management: Essentials of Risk-Based Security, two experienced professionals introduce ESRM.

• 

  Security Convergence: Managing Enterprise Security Risk

  By Dave Tyson

  This is the first book to discuss the subject of security convergence, providing real-world illustrations of implementation and the cost-saving benefits that result.

• 

  Flip This Risk for Enterprise Security: Industry Experts Share Their Insights About Enterprise Security Management Risks for Organizations

  By Karen Hardy

  It is a compilation of stories from experts in the field providingunique and creative perspectives on several security management areas including risk and resilience, business continuity, executive protection, GRC (Governance, Riskand ...

• 

  Security Risk Management Body of Knowledge

  By Julian Talbot, Miles Jakeman

  This is an indispensable resource for risk and security professional, students, executive management, and line managers with security responsibilities.

• 

  Enterprise Risk Management: From Incentives to Controls

  By James Lam

  In this book, Mr. Lam explains how an over-reliance on quantitative risk measurement has directly contributed to some of the high-profile risk management failures of recent years.

• 

  Information Technology Risk Management in Enterprise Environments: A Review of Industry Practices and a Practical Guide to Risk Management Teams

  By Daniel Minoli, Jake Kouns

  G. E. Beroggi (editor) and W. A. Wallace (editor), Computer Supported Risk Management, ISBN-13 9780792333722, Springer, New York, 1995. G. E. Beroggi and W. A. Wallace, Operational Risk Management: The Integration of Decision, ...

• 

  Cyber Security: ESORMA Quickstart Guide: Enterprise Security Operations Risk Management Architecture for Cyber Security Practitioners

  By David White, Mustafa Ahmed

  These eight domains are where business needs always come first. This is the quick start guide, enough to get you thinking and started. You can save time and money just as soon as you turn to the first domain. Buy now.

• 

  Security Leader Insights for Risk Management: Lessons and Strategies from Leading Security Professionals

  By Richard Chase

  ... mitigating board-level global risk, and being part of a Unified Risk Oversight Process in enterprise risk management. The short, straight-to-the-point chapters provide the reader with an easily accessible overview of current issues.

• 

  Managing Risk and Information Security: Protect to Enable

  By Malcolm Harkins

  This book compels information security professionals to think differently about concepts of risk management in order to be more effective.

• 

  Essentials of Enterprise Risk Management: Practical Concepts of ERM for General Managers

  By Rick Nason, Leslie Fleming

  This book lays out the basics of enterprise risk management in a common sense and highly applicable manner.