Bøger af Thomas R. Peltier

Developing an information security program that adheres to the principle of security as a business enabler must be the first step in an enterprise's effort to build an effective security program

Following in the footsteps of its bestselling predecessor, Information Security Fundamentals, Second Edition provides information security professionals with a clear understanding of the fundamentals of security required to address the range of issues they will experience in the field. Reorganizing its contents around ISO 27002, this updated edition presents ten new chapters; adds discussions of ISO 27001, ITIL, COSO, COBIT, and other frameworks; expands its coverage of compliance and governance issues; and includes new information on mobile security issues.

An effective information security program preserves your information assets and helps you meet business objectives. This book provides the tools you need to select, develop, and apply a security program that can be seen not as a nuisance but as a means to meeting your organization's goals.

Based on the seminars of the author, this title presents the various processes that your organization can employ in assessing risk, detailing each of its strengths and weaknesses. It offers information that helps managers to determine what processes best fit the needs of a given situation to mitigate risk levels.