Building and Implementing a Security Certification and Accreditation Program: OFFICIAL (ISC)2 GUIDE to the CAPcm CBK ((ISC)2 Press) (Hardcover)

~ (Author) "I once made the acquaintance of an information system security officer in a federal department who had what he defined as airtight security for his..." (more)
Key Phrases: certification test plan, system security plan, accreditation package, Nutria System, Common Personnel, Name of System (more...)

Editorial Reviews

Review

This book focuses on the processes that must be employed by an organization to establish a certification and accreditation program based on current federal government criteria… Pat has structured this book to address the key issues in certification and accreditation, including roles and responsibilities, the life cycle, and even a discussion of pitfalls to avoid. As with all of Pat’s work, he provides the reader with practical information on what works and what does not…
Even if government certification and accreditation is not your concern, the new ISO 27002 (formerly ISO17799) will require all of us to look for a process to make certification and accreditation bearable. Pat has succeeded in doing just that with this practical and readable book.
—Thomas R. Peltier, Peltier Associates, Member of the ISSA Hall of Fame, from the Foreword

Even if government certification and accreditation is not your concern, the new ISO 27002 (formerly ISO17799) will require all of us to look for a process to make certification and accreditation bearable. Pat has succeeded in doing just that with this practical and readable book.
-Thomas R. Peltier, Peltier Associates, Member of the ISSA Hall of Fame, from the Foreword

This book focuses on the processes that must be employed by an organization to establish a certification and accreditation program based on current federal government criteria… Pat has structured this book to address the key issues in certification and accreditation, including roles and responsibilities, the life cycle, and even a discussion of pitfalls to avoid. As with all of Pat's work, he provides the reader with practical information on what works and what does not…

Product Description

  Building and Implementing a Security Certification and Accreditation Program: Official (ISC)² Guide to the CAP CBK demonstrates the practicality and effectiveness of certification and accreditation (C&A) as a risk management methodology for IT systems in both public and private organizations. It provides security professionals with an overview of C&A components, enabling them to document the status of the security controls of their IT systems, and learn how to secure systems via standard, repeatable processes.

 This book consists of four main sections. It begins with a description of what it takes to build a certification and accreditation program at the organization level, followed by an analysis of various C&A processes and how they interrelate. The text then provides a case study of the successful implementation of certification and accreditation in a major U.S. government department. It concludes by offering a collection of helpful samples in the appendices.

Product Details

• Hardcover: 344 pages
• Publisher: Auerbach Publications; 1 edition (December 15, 2005)
• Language: English
• ISBN-10: 0849320623
• ISBN-13: 978-0849320620
• Product Dimensions: 9.5 x 6.4 x 1 inches
• Shipping Weight: 1.3 pounds (View shipping rates and policies)
• Average Customer Review: 3.0 out of 5 stars  See all reviews (2 customer reviews)
• Amazon.com Sales Rank: #433,445 in Books (See Bestsellers in Books)

Customer Reviews

Most Helpful Customer Reviews

4 of 4 people found the following review helpful:

1.0 out of 5 stars dated material, December 15, 2008

By	J. Fowler (Washington D.C.) - See all my reviews

This book is hard to follow primarily due to the author's labored writing style. Lots of DITSCAP information but no one really uses DITSCAP anymore.

1 of 6 people found the following review helpful:

5.0 out of 5 stars Applying Information Security "best practices", January 23, 2006

By	Charlie Chrosniak "Charlie Chrosniak" (Washington, DC USA) - See all my reviews

Author Pat Howard delivers the goods on this one. He finds an effective middle ground between producing an overview/survey and getting bogged down in the nuances and details. If you are charged with implementing an information security program and getting your IT systems certified and accredited, this is a good place to start!