Customer Reviews

The Security Risk Assessment Handbook: A Complete Guide for Performing Security Risk Assessments

5 star:		(5)
4 star:		(0)
3 star:		(0)
2 star:		(0)
1 star:		(0)

 

 

I manage information risks for a large organization on a professional basis and this is one of the best books I have read on this important topic. What I found most useful about this book is that it complements rather than competes with formal risk management methods. This book explains techniques and methods that you can use to enhance your existing risk assessment process like data gathering, impact analysis, evaluations and so on. This book should belong on every risk managers bookshelf.

I am taking a class on Threat Risk Assessment and one of our main references is Douglas Landoll's "The Security Risk Assessment Handbook". The great thing about this book is that it takes what would normally be extremely dry material and makes it interesting. The book has a conversational tone which is easy to read, and yet still manages to be very informative. A great tool for anyone who wants to learn about security assessments.

Dear Mr. Doug Landoll,

I have to give you Kudo's on your book. I just bought it and its awesome!!!! There is a section that is so well written regarding the reporting structure of security and how successful the program will be based on InfoSec placement and support. I've never seen it written so well before. Your book will be a career long reference. I hope you write more books.

Take care,
Daniel Nunez, CISSP, CISM

Finally Some one has heard our struggle!! We have a guide that is easily read and solves the blank sheet of paper problem. The book is based in a real world and shows almost step by step the process. The major selling point to me is it serves as a great reference book as well. When you need collection points or industry standards this is the book. Read it and you will not leave for a risk assessment with out it.

Very easy to read. Very good details on how the security industry works, no more secrets.