|
|
|
|
| LEADER |
04243nmm a2200469 u 4500 |
| 001 |
EB001926253 |
| 003 |
EBX01000000000000001089155 |
| 005 |
00000000000000.0 |
| 007 |
cr||||||||||||||||||||| |
| 008 |
210123 ||| eng |
| 020 |
|
|
|a 9781849287418
|
| 020 |
|
|
|a 1849287422
|
| 020 |
|
|
|a 9781849287401
|
| 020 |
|
|
|a 1849287406
|
| 020 |
|
|
|a 1849287414
|
| 050 |
|
4 |
|a HF5548.37
|
| 100 |
1 |
|
|a Mooney, Tom
|
| 245 |
0 |
0 |
|a Information security
|b a practical guide : bridging the gap between IT and management
|c Tom Mooney
|
| 246 |
3 |
1 |
|a Bridging the gap between IT and management
|
| 260 |
|
|
|a Ely, Cambridgeshire, United Kingdom
|b It Governance Publishing
|c 2015
|
| 300 |
|
|
|a 1 volume
|
| 505 |
0 |
|
|a Chapter 4: ThreatsChapter Overview; Objectives; Types of Threats; Hackers; Malware Writers; Script Kiddies; Journalists; Criminals; Physical Intruder; Researchers; Hacktivists; Disgruntled Employees; Chapter 5: Quick and Dirty Risk Assessment; Chapter Overview; Objectives; Identifying Risks; Defining the Risk Level; Risk Table; Realigning the Risk Level; Chapter 6: Getting Buy-in From Your Peers; Chapter Overview; Objectives; Points of Contact with your Peers; How to Engage with your Peers; Chapter 7: Documenting the System For Everyone; Chapter Overview; Objectives; Setting the Scene
|
| 505 |
0 |
|
|a EntitiesService Overview; Adding Boundaries; Showing Information Flow; Adding the Threats; Chapter 8: Mapping Data in the System; Chapter Overview; Objectives; Mapping Data; Chapter 9: Penetration Testing; Chapter Overview; Objectives; Types of Penetration Test; Scoping the test; Trusting the Testers; Implementing Fixes; Chapter 10: Information Security Policy; Chapter Overview; Objectives; The Advantages of Security Policies; Giving Your Policies Teeth; Key Security Policies; Ways of Ensuring Your Policy is Read; ITG Resources
|
| 505 |
0 |
|
|a Cover; Title; Copyright; Contents; Chapter 1: Day One as a Security Professional; Chapter Overview; Objectives; Your First Day; Confidentiality, Integrity and Availability (CIA); Getting to Know the Business; Key IT Personnel; What is the Security Culture?; Identifying the Gaps in Security; Chapter 2: Business Impact of Breaches; Chapter Overview; Objectives; How to Assess the Impact; Data Types; Impacts; Reputational Damage; Personal Impact; Contractual Impact; Financial Impact; Legal Impacts; Chapter 3: Business Risk Appetite; Chapter Overview; Objectives; Risk Appetite; Risk Treatments
|
| 653 |
|
|
|a Computer security
|
| 653 |
|
|
|a Sécurité informatique
|
| 653 |
|
|
|a Information technology / Security measures / fast
|
| 653 |
|
|
|a Technologie de l'information / Sécurité / Mesures
|
| 653 |
|
|
|a Information technology / Security measures
|
| 653 |
|
|
|a Business / Data processing / Security measures / fast
|
| 653 |
|
|
|a Business / Data processing / Security measures
|
| 653 |
|
|
|a Gestion / Informatique / Sécurité / Mesures
|
| 653 |
|
|
|a Computer security / fast
|
| 653 |
|
|
|a Computer Security
|
| 041 |
0 |
7 |
|a eng
|2 ISO 639-2
|
| 989 |
|
|
|b OREILLY
|a O'Reilly
|
| 776 |
|
|
|z 1849287414
|
| 776 |
|
|
|z 9781849287418
|
| 856 |
4 |
0 |
|u https://learning.oreilly.com/library/view/~/9781849287418/?ar
|x Verlag
|3 Volltext
|
| 082 |
0 |
|
|a 658.478
|
| 082 |
0 |
|
|a 330
|
| 520 |
|
|
|a Covering everything from your first day at work as an information security professional to developing and implementing enterprise-wide information security processes, this book explains the basics of information security, and how to explain them to management and others so that security risks can be appropriately addressed. Topics covered include: how to understand the security culture of the organization; getting to know the organisation and building relationships with key personnel; how to identify gaps in the organisation's security set-up; the impact of compromise on the organization; identifying, categorising and prioritising risks; the five levels of risk appetite and how to apply risk treatments via security controls; understanding the threats facing your organisation and how to communicate them; how to raise security awareness and engage with specific peer groups; system mapping and documentation (including control boundaries and where risks exist). --
|