Part I. Information assurance basics -- Developing an information assurance strategy -- The need for information security -- Information assurance principles -- Information assurance concepts -- Organizations providing resources for professionals -- Information assurance management system -- Current practices, regulations, and plans for information assurance strategy -- Part II. Information assurance planning process -- Approaches to implementing information assurance -- Organizational structure for mananging information assurance -- Asset management -- Information assurance risk management -- Information assurance policy -- Human resource assurance -- Advantages of certification, accreditation, and assurance -- Part III. Risk mitigation process -- Information assurance in system development and acquisition -- Physical and environmental security controls -- Information assurance awareness, training, and education (AT & E) -- Preventive information assurance tools -- Access control -- Part IV. Information assurance detection and recovery processes -- Information assurance monitoring tools and methods -- Information assurance measurements and metrics -- Incident handling -- Computer forensics -- Business continuity management -- Backup and restoration -- Part V. Application of information assurance to select inductries -- Healthcare -- Retail -- Industrial control systems.
A clear, actionable blueprint for securing the vital information and IT services of global organizations of all sizes, this essential guide contains invaluable best practices technically vetted by a panel of global security leaders
in English
978-0-07-182165-0
Computer networks--Security measures--Handbooks, manuals, etc. Computer security--Handbooks, manuals, etc. Data protection--Handbooks, manuals, etc.