Customer Reviews

Managing Information Assurance in Financial Services

5 star:		(4)
4 star:		(0)
3 star:		(0)
2 star:		(0)
1 star:		(0)

 

 

I recently started a project in information security for one of the top financial services company as Technical Manager. Since this is my first assignment in financial industry I decided to go through few books that can help me to understand information security in financial industry. Luckily I got this book which contains high-quality research, industry and practice articles in the area of information assurance in the financial services industry. This is not light reading....but it is worth every minute of effort. Now I don't feel like I am new to financial industry as the book helped me to give good understanding of all the key aspects of information security practices in financial services.

This text is an excellent introduction to the popular, critical aspects of information security in financial services. This book covers a well balanced ground between comprehensive coverage and detailed analysis. The book contains chapters on risk management strategies, security optimization, security economics, authentication and smart cards, fraud intelligence, information disclosure and regulatory compliance, security technologies in e-banking, social engineering and identity and access management.

Ths chapters are written by respected practioners covering thelatest trends, issues and countermeasures in that particular field. While the book is highly relevant to the IT and information security professionals working in financial services, the concepts and discussions through out the book are applicable to other industries as well.

Having worked in IT area for about a decade, I see the relevance and importance of the topics in the book. Overall, the book comprehensively covers important aspects of information assurance.

An excellent reference resource for any information security professional.

This book is an excellent introduction to the important topics within Information Security in the financial services sector. Overall, the organization, selection of topics, and level of coverage are well suited for anyone working or interested in Information Security. Each chapter provides great insights into each topic and has enough introduction to the subject that no prior experience or knowledge is required. Specifically, I liked the chapters regarding "Return on Security Investments", "Phishing" and "Information Assurance Strategies".

This book provides an excellent review of the state of the art in the Information Security space, particularly in reference to financial institutions. The approach of the book is to split this space into three sections- risk management & strategy, technologies/countermeasures, and current trends and issues faced by financial institutions. You may have come across these individual papers as part of regular work / study / research, however having them compiled within a single tome with a clear arc helps put them into perspective, enhancing the value of each individual paper. A must read for information security technologists and banking / financial services technology professionals / enterpreneurs.