Security Risk Management: Building An Information Security Risk Management Program From The Ground Up
Download Free (EPUB, PDF)

The goal of Security Risk Management is to teach you practical techniques that will be used on a daily basis, while also explaining the fundamentals so you understand the rationale behind these practices. Security professionals often fall into the trap of telling the business that they need to fix something, but they can’t explain why. This book will help you to break free from the so-called "best practices" argument by articulating risk exposures in business terms. You will learn techniques for how to perform risk assessments for new IT projects, how to efficiently manage daily risk activities, and how to qualify the current risk level for presentation to executive level management. While other books focus entirely on risk analysis methods, this is the first comprehensive guide for managing security risks.Named a 2011 Best Governance and ISMS Book by InfoSec Reviews Includes case studies to provide hands-on experience using risk assessment tools to calculate the costs and benefits of any security investmentExplores each phase of the risk management lifecycle, focusing on policies and assessment processes that should be used to properly assess and mitigate riskPresents a roadmap for designing and implementing a security risk management program

Paperback: 360 pages

Publisher: Syngress; 1 edition (May 31, 2011)

Language: English

ISBN-10: 1597496154

ISBN-13: 978-1597496155

Product Dimensions: 7.5 x 0.8 x 9.2 inches

Shipping Weight: 1.6 pounds (View shipping rates and policies)

Average Customer Review: 4.4 out of 5 stars  See all reviews (20 customer reviews)

Best Sellers Rank: #261,601 in Books (See Top 100 in Books) #73 in Books > Business & Money > Insurance > Risk Management #162 in Books > Computers & Technology > Business Technology > Management Information Systems #385 in Books > Business & Money > Management & Leadership > Information Management

First off, to start this book is well organized, each sub section of each section of each chapter is clearly outlined in the Contents section, so if you do not plan to read cover to cover and just need to have a reference, or need a refresher for your current project you can easily find what you are looking for without spending hours reading through chapters to find what closely matches your project. The next great thing about this book is that it offers an easy to read flow of text, the book is written in standard (non technical) terms, and allows for the ready not to become overwhelmed with technical terms (flipping back and forth to a dictionary). This book (if you read it in order) will introduce you to why you need security risk management programs, and how to build one and implement it on to your infrastructure. As the author points out, the old manner of using a standard checklist is not a valid way to go now a days. I always thought this to be true, since (in my opinion) every infrastructure is different and therefore requires a different approach to analysis -- not just a set list to follow. This book offers a straight forward approach to create your program, and then implement it. As you get toward the end of the book it will show you more advance topics and other approaches developed by security professionals. The only flaw I can find with this book, is it could offer more screenshots and examples. However, it does offer some, but I find having a visual representation of what to aim for helps, when trying new techniques and concepts.In the end this book is an easy to read and well written; it also makes a great reference for any information technology professional or IT security personnel.

Security Risk Management: Building an Information Security Risk Management Program from the Ground Up Managing Risk In Information Systems (Information Systems Security & Assurance) Social Security & Medicare Facts 2016: Social Security Coverage, Maximization Strategies for Social Security Benefits, Medicare/Medicaid, Social Security Taxes, Retirement & Disability, Ser Risk Management for Computer Security: Protecting Your Network and Information Assets The Handbook of Program Management: How to Facilitate Project Success with Optimal Program Management, Second Edition Building Enterprise Information Architectures: Reengineering Information Systems Operating System Security (Synthesis Lectures on Information Security, Privacy, and Trust) Security Risk Assessment: Managing Physical and Operational Security The Feeling of Risk: New Perspectives on Risk Perception (Earthscan Risk in Society) Agile Program Management : How Program Managers Can Influence Agile Success Design Like You Give a Damn : Building Change from the Ground Up The Nature of Order: An Essay on the Art of Building and the Nature of the Universe, Book 4 - The Luminous Ground (Center for Environmental Structure, Vol. 12) Making Enterprise Risk Management Pay Off: How Leading Companies Implement Risk Management Fundamentals of Risk Management: Understanding, Evaluating and Implementing Effective Risk Management Financial Risk Management: Applications in Market, Credit, Asset and Liability Management and Firmwide Risk (Wiley Finance) Enterprise Risk Management (Financial Engineering and Risk Management) Management Information Systems for the Information Age Making Enterprise Information Management (EIM) Work for Business: A Guide to Understanding Information as an Asset Building Green, New Edition: A Complete How-To Guide to Alternative Building Methods Earth Plaster * Straw Bale * Cordwood * Cob * Living Roofs (Building Green: A Complete How-To Guide to Alternative) Index Funds: Index Funds Investing Guide To Wealth Building Through Index Funds Investing With Index Funds Investing Strategies For Building Wealth Including ... Guide To Wealth Building With Index Funds)