Security Planning and Disaster Recovery [Paperback]

Eric Maiwald (Author), William Sieglein (Author)

Book Description

ISBN-10: 0072224630 | ISBN-13: 978-0072224634 | Publication Date: May 28, 2002 | Edition: 1

Proactively implement a successful security and disaster recovery plan--before a security breach occurs. Including hands-on security checklists, design maps, and sample plans, this expert resource is crucial for keeping your network safe from any outside intrusions.

Editorial Reviews

From the Back Cover

Secrets and strategies for protecting your network before trouble strikes

Create and implement a successful security system and recovery plan with help from this insightful and practical resource. This detailed guide provides you with a complete roadmap for developing an effective end-to-end security program. You’ll even discover numerous methods for proactively protecting your network before a security breach occurs--saving you time, effort, and money in the long run. Covering the earliest phases of plan development, team organization and training, to technology deployment and incident recovery strategies, this book combines in-depth conceptual explanations with hands-on checklists at the end of every chapter. Definitive, authoritative, and up to date, this book is an invaluable tool in the ongoing and often challenging task of maintaining network security.

• Understand the laws and regulations affecting information security programs
• Deploy new projects and technologies in a cost-effective manner
• Define requirements and establish policies and procedures for your organization
• Respond to incidents and disasters in a systematic fashion to minimize loss or damage to valuable data
• Learn to identify, hire--and keep--security professionals and establish the reporting structure for the information security department
• Introduce human controls, including staff awareness, to help improve security
• Discover how audits and penetration tests can help in assessing risk
• Assemble an incident response team and set priorities and goals for each member

About the Author

Eric Maiwald (Gaithersburg, MD) is the Director of Security Services for Fortrex Technologies. Eric oversees all security consulting and product implementations for Fortrex clients. He has personally been involved in performing assessments, developing policies, and implementing security solutions for large financial institutions, services firms, and manufacturers. Eric is also the lead instructor for Fortrex Security Training including the ISS Certified Engineer (ICE) training class. He is certified as an Information Systems Security Professional by the International Information Systems Security Certification Consortium and is the author of Network Security: A Beginner's Guide (Osborne). William Sieglein (Gaithersburg, MD) is the Manager of Enterprise Security Management Services for Fortrex Technologies. William's INFOSEC experience is broad ranging and includes security assessments, security architecture development, security infrastructure planning, product evaluation and implementation, security program and policy development, security project management and security training & awareness development and delivery. Sieglein also was a consultant for 6 years with the technology consulting firm Booz Allen & Hamilton where he spent much of his tenure with the CIA where he lead a project to develop an agencywide, comprehensive system security certification and accreditation (C&A) program. After completion of the program development Sieglin then lead several successful large-scale system C&A efforts. Sieglein also redesigned and taught the nationally accredited week-long computer security training course at the National Cryptologic School (NCS), Department of Defense (DoD) Security Institute, and the Defense Intelligence Agency (DIA). Prior to joining Booz Allen, Sieglein served 11 years as a systems analyst with the National Security Agency (NSA). Sieglein is a member of the Computer Security Institute and a frequent speaker at conferences and seminars for organizations such as the Regional Computer Forensics Group, American Society for Industrial Security and National Association of Credit Managers. He has appeared on the "Business Security Talk" radio program in the Washington, D.C. area and has been published in the Internet Security Advisor magazine.

Product Details

• Paperback: 320 pages
• Publisher: McGraw-Hill Osborne Media; 1 edition (May 28, 2002)
• Language: English
• ISBN-10: 0072224630
• ISBN-13: 978-0072224634
• Product Dimensions: 9.1 x 7.4 x 0.9 inches
• Shipping Weight: 1.4 pounds (View shipping rates and policies)
• Average Customer Review: 4.2 out of 5 stars  See all reviews (4 customer reviews)
• Amazon Best Sellers Rank: #1,262,101 in Books (See Top 100 in Books)

More About the Author

Discover books, learn about writers, read author blogs, and more.

Customer Reviews

Most Helpful Customer Reviews

4 of 6 people found the following review helpful:

4.0 out of 5 stars really good book, June 12, 2002

By 

Boris Ricardi (california) - See all my reviews

This review is from: Security Planning and Disaster Recovery (Paperback)

I liked this book.

It is straight to the point. Other books are so long that they waste you time telling you about everything. Not this book.

Good background into sec planning and DR.

5.0 out of 5 stars A security book that hits the mark !, July 25, 2002

By A Customer

This review is from: Security Planning and Disaster Recovery (Paperback)

If you are trying to build an information security program, this book hits the mark. It is one of the most complete books on information security that I have read.

3 of 5 people found the following review helpful:

3.0 out of 5 stars No DRP template, December 2, 2002

By 

Gai (Bangkok Thailand) - See all my reviews

This review is from: Security Planning and Disaster Recovery (Paperback)

I'm try to build DRP for company and found this book.
After I had read it all and can't find any good example or template.
so this mean if you want to build DRP, you will take more time to do a lot of things. Alternative way, you can find free template from internet but it is not good enough to be used it for your company. If you want good one you have to pay.

If this book include DRP template, It's might be good to save time to build DRP.
(I'm working in IS Manager)