|
The Best Damn IT Security Management Book Period
The Best Damn Security Manager's Handbook Period has comprehensive coverage of all management issues facing IT and security professionals. Compiled from the best of the Syngress and Butterworth Heinemann libraries and authored by business continuity expert Susan Snedakers, this volume is an indispensable addition to a serious security professional's
toolkit. The coverage includes Business Continuity, Risk Assessment, Protection Assets, Project Management, Security Operations, and Security Management, and Security Design Integration. It is an all encompassing book, covering general security management issues and providing specific guidelines and checklists. Anyone studying for a security specific certification or ASIS certification, will find this a valuable resource. It is the only book to cover all major IT and security management issues in one place: disaster recover, project management, operations management, and risk assessment.
CONTENTS:
1. Windows of Vulnerability
2. Vulnerability Assessment 101
3. Vulnerability Assessment Tools
4. Vulnerability Assessment: Step One
5. Vulnerability Assessment: Step Two
6. Going Further
7. Vulnerability Management
8. Vulnerability Management Tools
9. Vulnerability and Configuration Management
10. Regulatory Compliance
11. Tying it all together
12. Introducing the INFOSEC Evaluation Methodology
13. Before the Evaluation Starts
14. Setting Expectations
15. Scoping the Evaluation
16. Legal Principles for Information Security Evaluations
17. Building the Technical Evaluation Plan
18. Starting Your Onsite Efforts
19. Network Discovery Activities
20. Collecting the Majority of Vulnerabilities
21. Fine-Tuning the Evaluation
22. The Onsite Closing Meeting
23. Post Evaluation Analysis
24. Creating Measurements and Trending Results
25. Trending Metrics
26. Final Reporting
27. Summing Up the INFOSEC Evaluation Methodology
28. Business Continuity and disaster recovery overview
29. Project Initiation
30. Risk Assessment
31. Business Impact Analysis
32. Mitigation Strategy Development
33. Business Continuity/Disaster Recovery Plan Development
34. Emergency Response and recovery
35. Training, Testing and Auditing
36. BC/DR Plan Maintenance
37. BC/DR Checklists
INDEX
|
