The Information Systems Security Officers Guide: Establishing and Managing an Information Protection Program - page 1
- Table of Contents
- Table of Contents
- BackCover
- The Information Systems Security Officer s Guide - Establishing and Managing an Information Protection Program, Second Edition
- Preface
- Introduction
- Ed Halibozek
- Andy Jones
- Steve Lutz
- Section I: The Working Environment of an ISSO
- Chapter 1: Understanding the Information World Environment
- Introduction
- Revolutions and Evolutions in High Technology
- Global Information Infrastructure (GII)
- National Information Infrastructure (NII)
- How did We Get From Adam to the Internet?
- Changing Criminal Justice Systems
- The Human Factor
- Questions to Consider
- Summary
- Chapter 2: Understanding the Business and Management Environment
- The Changing Business and Government Environments
- Understanding the Business Environment
- Management Responsibilities and Communicating with Management
- Creating a Competitive Advantage Through InfoSec
- The ISSO as a Business Manager
- Service, Support, and a Business Orientation
- Business Managers and InfoSec
- Questions to Consider
- Summary
- Chapter 3: Understanding Today s Threats to Information Assets
- Introduction
- ISSO Must Understand Threat Agents Motive-Rationalization-Opportunity
- Questions to Consider
- Summary
- Chapter 4: The International Widget Corporation (IWC)
- Introduction
- IWC Background Information
- Key Elements for the ISSO to Consider
- Getting to Know IWC
- IWC s Business Plans
- IWC and the History of its ISSO
- CIAPP Planning
- IWC s Departments of Primary Importance to the ISSO
- IWC Vision, Mission, and Quality Statements
- Questions to Consider
- Summary
- Section II: The Duties and Responsibilities of an ISSO
- Chapter 5: The ISSO s Position, Duties, and Responsibilities
- Introduction
- The ISSO in the International Widget Corporation (IWC)
- IWC ISSO Duties and Responsibilities
- Goals and Objectives
- Leadership Position
- Providing CIAPP Service and Support
- Use Team Concepts
- Vision, Mission, and Quality Statements
- Information Systems Protection Principles
- Project and Risk Management Processes
- ISSO and CIAPP Organizational Responsibilities
- Questions to Consider
- Summary
- Chapter 6: The Infosec Strategic, Tactical, and Annual Plans
- Introduction
- IWC s Infosec Strategic Plan
- IWC s Infosec Tactical Plan
- IWC s Infosec Annual Plan
- Mapping ISSSP, ITP, and IAP to Projects using a Matrix
- Questions to Consider
- Summary
- Chapter 7: Establishing a CIAPP and Infosec Organization
- Introduction
- Corporate Information Assets Protection Program (CIAPP)
- ISSO thought Process in Establishing the Infosec Organization
- Questions to Consider
- Summary
- Chapter 8: Determining and Establishing InfoSec Functions
- Introduction
- Processes
- Valuing Information
Similar products
The Executive Guide to Information Security: Threats, Challenges, and Solutions
Information Architecture for the World Wide Web: Designing Large-Scale Web Sites
The Visible Employee: Using Workplace Monitoring and Surveillance to Protect Information Assets-Without Compromising Employee Privacy or Trust