Customer Reviews

Security Management (It Infrastructure Library Series) (Part 14)

5 star:		(0)
4 star:		(1)
3 star:		(1)
2 star:		(0)
1 star:		(0)

 

 

This is a necessary resource for either implementing the ITIL, or for anyone who is preparing for the certification exam. The focus of this guide is on the infrastructure and operational aspects of IT, and how security relates to service support and service delivery.

Note that this guide does not provide guidance for an enterprise-wide security posture, nor does it cover security from the security officer's perspective. However, the guidance provided needs to be integrated into an overall security program, and associated policies and procedures. Another fact worth noting is this book is circa 1999. Given the general nature of the material, though, this does not diminish the value of the content.

Key ITIL areas that the material in this book does address include: problem management (from the ITIL Service Support process areas), and business continuity planning, financial management, and service level management (from the ITIL Service Delivery process areas).

While this book's main value is to organizations implementing ITIL, or individuals pursuing certification, there is one aspect that does stand out - the way security is linked to service level agreements is an outstanding approach that is often overlooked outside of ITIL shops, and is a practice that should be incorporated in SLAs and included in service level management plans.

This book has withstood the test of time with respect to the way security affects service level agreements and why security needs to be incorporated into service level management plans and service support for all Fortune 1000 companies.

ITIL security guidance should be an adjunct component used with an overall security program and information security framework such as ISO 27001 and 27002 or COBIT.