Information security management : (Record no. 2289)
[ view plain ]
| 000 -LEADER | |
|---|---|
| fixed length control field | 03498nam a2200337Ia 4500 |
| 005 - DATE AND TIME OF LATEST TRANSACTION | |
| control field | 20260803094032.0 |
| 008 - FIXED-LENGTH DATA ELEMENTS--GENERAL INFORMATION | |
| fixed length control field | 251212s2010 xx 000 0 und d |
| 020 ## - INTERNATIONAL STANDARD BOOK NUMBER | |
| International Standard Book Number | 978-1-4200-7854-1 |
| 050 ## - LIBRARY OF CONGRESS CALL NUMBER | |
| Classification number | 005.8 R12i |
| 100 ## - MAIN ENTRY--PERSONAL NAME | |
| Personal name | Raggad, Bel G. |
| 245 1# - TITLE STATEMENT | |
| Title | Information security management : |
| Remainder of title | concepts and practice / |
| Statement of responsibility, etc. | Bel G. Raggad. |
| 260 ## - PUBLICATION, DISTRIBUTION, ETC. | |
| Place of publication, distribution, etc. | Boca Raton : |
| Name of publisher, distributor, etc. | CRC Press, |
| Date of publication, distribution, etc. | 2010. |
| 300 ## - PHYSICAL DESCRIPTION | |
| Extent | xxv, 832 p.: |
| 300 ## - PHYSICAL DESCRIPTION | |
| Dimensions | 24 cm. |
| 336 ## - CONTENT TYPE | |
| Content type term | Text |
| 337 ## - MEDIA TYPE | |
| Media type term | Unmediated |
| 338 ## - CARRIER TYPE | |
| Carrier type term | Volume |
| 500 ## - GENERAL NOTE | |
| General note | Includes bibliographic references and index |
| 546 ## - LANGUAGE NOTE | |
| Language note | English |
| 505 ## - FORMATTED CONTENTS NOTE | |
| Formatted contents note | Introduction to Information Security Management -- Introduction to Management Concepts -- The Information Security Life Cycle -- SECURITY PLAN. Security Plan -- Security Policy -- Business Continuity Planning -- SECURITY ANALYSIS. Security Risk Management -- Continual Security: Integrated Fault-Event Analysis and Response Framework (IFEAR) -- Active Security Assessment -- System Availability -- SECURITY DESIGN. Nominal Security Enhancement Design Based on ISO/IEC 27002 -- Technical Security Enhancement Based on ISO/IEC 27001 -- SECURITY IMPLEMENTATION. Security Solutions -- The Common Criteria -- SECURITY REVIEW. Security Review through Security Audit -- Privacy Rights, Information Technology, and HIPAA -- CONTINUAL SECURITY. The Sarbanes-Oxley Act and IT Compliance -- Cyberterrorism and Homeland Security. |
| 520 ## - SUMMARY, ETC. | |
| Summary, etc. | "Information security cannot be effectively managed unless secure methods and standards are integrated into all phases of the information security life cycle. And, although the international community has been aggressively engaged in developing security standards for network and information security worldwide, there are few textbooks available that provide clear guidance on how to properly apply the new standards in conducting security audits and creating risk-driven information security programs." "Meeting the need for an authoritative and practical classroom resource, Information Security Management: Concepts and Practice provides a general overview of security auditing before examining the various elements of the information security life cycle. It explains the ISO 17799 standard and walks readers through the steps of conducting a nominal security audit that conforms to the standard. The text also provides detailed guidance for conducting an in-depth technical security audit leading to certification against the 27001 standard. Topics addressed include cyber security, security risk assessments, privacy rights, HIPAA, SOX, intrusion detection systems, security testing activities, cyber terrorism, and vulnerability assessments." "This self-contained text is filled with review questions, workshops, and real-world examples that illustrate effective implementation and security auditing methodologies. It also includes a detailed security auditing methodology students can use to devise and implement effective risk-driven security programs that touch all phases of a computing environment - including the sequential stages needed to maintain virtually air-tight IS management systems that conform to the latest ISO standards."--BOOK JACKET |
| 591 ## - | |
| -- | 1 |
| 650 ## - SUBJECT ADDED ENTRY--TOPICAL TERM | |
| Topical term or geographic name entry element | Computer security |
| General subdivision | Management |
| 650 ## - SUBJECT ADDED ENTRY--TOPICAL TERM | |
| Topical term or geographic name entry element | Data protection |
| 943 ## - EQUIVALENCE OR CROSS-REFERENCE--COLLECTIVE TITLE [OBSOLETE] [CAN/MARC only] | |
| -- | 0 |
| -- | 0 |
| Date of treaty signing | 0 |
| -- | 1 |
| Date of a work | 0 |
| Miscellaneous information | 1 |
| Medium | 0 |
| -- | 0 |
| -- | 0 |
| 944 ## - | |
| -- | 1 |
| -- | 1 |
| -- | 0 |
| 953 ## - | |
| -- | HED4376 |
| 953 ## - | |
| -- | CollLib |
| 942 ## - ADDED ENTRY ELEMENTS (KOHA) | |
| Source of classification or shelving scheme | Library of Congress Classification |
| Koha item type | Books |
| Institution code [OBSOLETE] | rizal |
| -- | 2015-04-07 23:18:14 |
| -- | rizal |
| Edition | 2015-04-07 23:18:14 |
| 998 ## - LOCAL CONTROL INFORMATION (RLIN) | |
| MyRDA biblio | 2300 |
| Withdrawn status | Lost status | Source of classification or shelving scheme | Damaged status | Not for loan | Home library | Current library | Shelving location | Date acquired | Full call number | Barcode | Date last seen | Price effective from | Koha item type |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Dewey Decimal Classification | FEU - Cavite Higher Education | FEU - Cavite Higher Education | HED Library | 12/21/2025 | 005.8 R12i | HED4376 | 06/02/2026 | 12/21/2025 | Books |