Information Assurance: Managing Organizational It Security Risks

Other | June 1, 2002

byBoyce, Joseph, Joseph Boyce, Daniel JenningsEditorJoseph Boyce

not yet rated|write a review
Written by two INFOSEC experts, this book provides a systematic and practical approach for establishing, managing and operating a comprehensive Information Assurance program. It is designed to provide ISSO managers, security managers, and INFOSEC professionals with an understanding of the essential issues required to develop and apply a targeted information security posture to both public and private corporations and government run agencies.

There is a growing concern among all corporations and within the security industry to come up with new approaches to measure an organization's information security risks and posture. Information Assurance explains and defines the theories and processes that will help a company protect its proprietary information including:

* The need to assess the current level of risk.
* The need to determine what can impact the risk.
* The need to determine how risk can be reduced.


The authors lay out a detailed strategy for defining information security, establishing IA goals, providing training for security awareness, and conducting airtight incident response to system compromise. Such topics as defense in depth, configuration management, IA legal issues, and the importance of establishing an IT baseline are covered in-depth from an organizational and managerial decision-making perspective.

* Experience-based theory provided in a logical and comprehensive manner.
* Management focused coverage includes establishing an IT security posture, implementing organizational awareness and training, and understanding the dynamics of new technologies.
* Numerous real-world examples provide a baseline for assessment and comparison.

Pricing and Purchase Info

$80.79 online
$104.92 list price (save 22%)
In stock online
Ships free on orders over $25

From the Publisher

Written by two INFOSEC experts, this book provides a systematic and practical approach for establishing, managing and operating a comprehensive Information Assurance program. It is designed to provide ISSO managers, security managers, and INFOSEC professionals with an understanding of the essential issues required to develop and apply ...

Joseph G. Boyce, CISA, is a Senior Information Assurance (IA) Manager within the Department of Defense (DoD). He has over 25 years of experience as an IA INFOSEC professional with particular expertise in developing and managing large-scale organizational IA programs to ensure the protection of highly critical and sensitive information....

other books by Boyce, Joseph

Anticipation
Anticipation

Kobo ebook|Jul 13 2016

$3.09 online$3.99list price(save 22%)
Dictionary of Furniture: Second Edition
Dictionary of Furniture: Second Edition

Kobo ebook|Jan 2 2014

$18.49 online$23.99list price(save 22%)
Format:OtherDimensions:261 pages, 1 × 1 × 1 inPublished:June 1, 2002Publisher:Butterworth (trade)Language:English

The following ISBNs are associated with this title:

ISBN - 10:0080508715

ISBN - 13:9780080508719

Customer Reviews of Information Assurance: Managing Organizational It Security Risks

Reviews

Extra Content

Table of Contents

Section I - The Organizational IA Program: The Practical and Conceptual Foundation
Ch. 1 IA and the Organization: The Challenges
Ch. 2 Basic Security Concepts, Principles, and Strategy
Section II - Defining the Organization's Current IA Posture
Ch. 3 Determining the Organization's IA Baseline
Ch. 4 Determining IT Security Priorities
Ch. 5 The Organization's IA Posture
III - Establishing and Managing an IA Defense In Depth Strategy within an Organization
Ch. 6 Layer 1: IA Policies
Ch. 7 Layer 2: IA Management
Ch. 8 Layer 3: IA Architecture
Ch. 9 Layer 4: Operational Security Administration;
Ch. 10 Layer 5: Configuration Management
Ch. 11 Layer 6: Life-Cycle Security
Ch. 12 Layer 7: Contingency Planning
Ch. 13 Layer 8: IA Education, Training, and Awareness
Ch. 14 Layer 9: IA Policy Compliance Oversight
Ch. 15 Layer 10: IA Incident Response
Ch. 16 Layer 11: IA Reporting
Appendix