A Practical Guide to Managing Information Security (Artech House Technology Management Library) (Hardcover)

by Steve Purser (Author) "This book is about managing information security..." (more)
Key Phrases: United States, Information Technology Security Training Requirements, Performance-Based Model (more...)

Editorial Reviews

Product Description
This groundbreaking book helps you master the management of information security, concentrating on the proactive recognition and resolution of the practical issues of developing and implementing IT security for the enterprise. Drawing upon the authors’ wealth of valuable experience in high-risk commercial environments, the work focuses on the need to align the information security process as a whole with the requirements of the modern enterprise, which involves empowering business managers to manage information security-related risk. Throughout, the book places emphasis on the use of simple, pragmatic risk management as a tool for decision-making. The first book to cover the strategic issues of IT security, it helps you to: understand the difference between more theoretical treatments of information security and operational reality; learn how information security risk can be measured and subsequently managed; define and execute an information security strategy design and implement a security architecture; and ensure that limited resources are used optimally.

About the Author
Steve Purser is the manager of ICSD Security Support & Administration for Clearstream Services, where he is responsible for all aspects of IT security. Formerly, he was head of IT security for Banque Generale du Luxembourg and an expert consultant in the areas of IT and Networking to the European Commission. He holds a Ph.D. in chemical physics from the University of East Anglia.

Product Details

• Hardcover: 280 pages
• Publisher: Artech House Publishers; illustrated edition edition (March 31, 2004)
• Language: English
• ISBN-10: 1580537022
• ISBN-13: 978-1580537025
• Product Dimensions: 10.1 x 7.2 x 0.8 inches
• Shipping Weight: 1.2 pounds (View shipping rates and policies)
• Average Customer Review: 4.7 out of 5 stars See all reviews (3 customer reviews)
• Amazon.com Sales Rank: #1,562,317 in Books (See Bestsellers in Books)

Customer Reviews

Most Helpful Customer Reviews

5.0 out of 5 stars Excellent, October 30, 2004

By	Alan Jewsbury - See all my reviews (REAL NAME)

Excellent. This book strikes exactly the right balance between providing real-life, pragmatic guidance in the management of information security, and at the same time provides sufficient technical and operational depth to the subject matter overall. The book is well structured and very clear, and provides a coherent approach to addressing strategic and tactical information security issues. Security technologies, policies, procedures and processes are clearly explained and practically demonstrated but the greatest benefit of this book is that it sets risk and security in the context of a functioning organisation - in this case a bank - and provides answers to the concerns of senior management, technical staff and business managers in a way that supports, not hinders, the organisation. Highly recommended reading.

5.0 out of 5 stars A must read for the IT security professional!, July 25, 2004

By	JohnV - See all my reviews

Steve focuses on providing practical guidance for the IT security professional. He not only focuses on the security elements of deploying and managing IT security initiatives but he also describes the more crucial management aspects of it as well. Written by a security practioner for security practioners, this book is a must read for anyone seriously engaged in the field.

4.0 out of 5 stars Good Book..., July 23, 2004

By	Xavier - See all my reviews

This book is a good resource for security professionals. It provides a broad review of Information Security management techniques and describes some of the controls, mainly technical controls. The fictitious case study is useful because it illustrates the way decisions are often made in real life and provides examples of the kind of trade-offs that are often necessary. This is definitively not an IT Security encyclopedia. However the main areas of IT Security are covered without making a decision on behalf of the reader.