Security Program and Policies: Principles and Practices (2nd Edition) (Certification/Training)

Download Security Program and Policies: Principles and Practices (2nd Edition) (Certification/Training) PDF EPUB

All you need to learn about information security applications and policies, in a single reserve

• Clearly explains all areas of InfoSec system and policy planning, advancement, deployment, and administration
• Thoroughly up-to-date for today’s challenges, laws, rules, and guidelines
• An ideal resource for anybody pursuing an information protection management profession

�

In today’s dangerous globe, failures in information protection can be catastrophic. Agencies must guard themselves.

�

Sari Stern Greene, CISSP, CRISC, CISM, NSA/IAM, can be an information protection practitioner, author, and business owner. This up-to-date guide can help you produce, deploy, and manage them.

Comprehensive and easy to comprehend, it explains key principles and methods through real-life illustrations. She actually is passionate about the need for protecting information and important infrastructure.

�

In the event that you understand basic info security, you’re prepared to be successful with this publication.

�

Learn to

·� � � � � � � � Establish program objectives, components, domains, and governance

·� � � � � � � � Understand policies, standards, methods, guidelines, and programs—and the differences included in this

·� � � � � � � � Write policies in “ordinary language,” with the proper level of fine detail

·� � � � � � � � Apply the Confidentiality, Integrity & Availability (CIA) protection model

·� � � � � � � � Make use of NIST assets and ISO/IEC 27000-series specifications

·� � � � � � � � Align protection with business technique

·� � � � � � � � Define, inventory, and classify your details and systems

·� � � � � � � � Systematically recognize, prioritize, and manage InfoSec dangers

·� � � � � � � � Reduce “people-related” dangers with role-based Protection Education, Awareness, and Schooling (SETA)

·� � � � � � � � Put into action effective physical, environmental, communications, and operational protection

·� � � � � � � � Effectively manage gain access to control

·� � � � � � � � Protected the complete system advancement lifecycle

·� � � � � � � � React to incidents and make certain continuity of functions

·� � � � � � � � Adhere to laws and regulations, which includes GLBA, HIPAA/HITECH, FISMA, state data protection and notification guidelines, and PCI DSS

�