- Save $10 when you spend $50 and pay with Bill Me Later. The fast and convenient way to buy without using your credit card. Offer limited to items purchased from Amazon.com between July 14, 2008 and July 21, 2008. One per customer account. Enter code BMLSAVES at checkout. Here's how (restrictions apply)
Join Amazon Prime and ship Two-Day for free and Overnight for $3.99. Already a member? Sign in.
Special Offers and Product Promotions
Better Together
Customers Who Bought This Item Also Bought
Information Security Risk Analysis, Second Edition by Thomas R. Peltier  (11)
$63.96
|
The Security Risk Assessment Handbook: A Complete Guide for Performing Security Risk Assessments by Douglas J. Landoll  (3)
$63.96
|
Security Metrics: Replacing Fear, Uncertainty, and Doubt by Andrew Jaquith  (19)
$31.49
|
Writing Information Security Policies (Landmark) by Scott Barman (11)
$31.49
|
The CERT(R) Guide to System and Network Security Practices (The SEI Series in Software Engineering) by Julia H. Allen (10)
$32.60
|
Editorial Reviews
Book Info
Provides a systematic way to evaluate and manage information security risks. Illustrates the implementation of self-directed evaluations. Shows how to tailor evaluation methods to different types of organizations.
From the Back Cover
0321118863B05172002
See all Editorial Reviews
Provides a systematic way to evaluate and manage information security risks. Illustrates the implementation of self-directed evaluations. Shows how to tailor evaluation methods to different types of organizations.
From the Back Cover
Information security requires far more than the latest tool or technology. Organizations must understand exactly what they are trying to protect--and why--before selecting specific solutions. Security issues are complex and often are rooted in organizational and business concerns. A careful evaluation of security needs and risks in this broader context must precede any security implementation to insure that all the relevant, underlying problems are first uncovered.
The OCTAVE approach for self-directed security evaluations was developed at the influential CERT(R) Coordination Center. This approach is designed to help you:
- Identify and rank key information assets
- Weigh threats to those assets
- Analyze vulnerabilities involving both technology and practices
OCTAVE(SM) enables any organization to develop security priorities based on the organization's particular business concerns. The approach provides a coherent framework for aligning security actions with overall objectives.
Managing Information Security Risks, written by the developers of OCTAVE, is the complete and authoritative guide to its principles and implementations. The book:
- Provides a systematic way to evaluate and manage information security risks
- Illustrates the implementation of self-directed evaluations
- Shows how to tailor evaluation methods to different types of organizations
Special features of the book include:
- A running example to illustrate important concepts and techniques
- A convenient set of evaluation worksheets
- A catalog of best practices to which organizations can compare their own
0321118863B05172002
See all Editorial Reviews
Product Details
|
