Information Security Governance Simplified

From the Boardroom to the Keyboard

Todd Fitzgerald

• Publisher: CRC Press
• Year: 2016
• eBook ISBN: 9781466551282
• Edition: 1
• Topic: Business
• Subtopic: Business General
• Index: Business

Security practitioners must be able to build a cost-effective security program while at the same time meet the requirements of government regulations. This book lays out these regulations in simple terms and explains how to use the control frameworks to build an effective information security program and governance structure. It discusses how organizations can best ensure that the information is protected and examines all positions from the board of directors to the end user, delineating the role each plays in protecting the security of the organization.

Table of contents

• Cover
• Halftitle
• Other
• Title Page
• Copyright Page
• Dedication
• Table of Contents
• Foreword
• Acknowledgments
• Introduction
• About the Author
• Chapter 1 Getting Information Security Right: Top to Bottom
• Chapter 2 Developing Information Security Strategy
• Chapter 3 Defining the Security Management Organization
• Chapter 4 Interacting with the C-Suite
• Chapter 5 Managing Risk to an Acceptable Level
• Chapter 6 Creating Effective Information Security Policies
• Chapter 7 Security Compliance Using Control Frameworks
• Chapter 8 Managerial Controls: Practical Security Considerations
• Chapter 9 Technical Controls: Practical Security Considerations
• Chapter 10 Operational Controls: Practical Security Considerations
• Chapter 11 The Auditors Have Arrived, Now What?
• Chapter 12 Effective Security Communications
• Chapter 13 The Law and Information Security
• Chapter 14 Learning from Information Security Incidents
• Chapter 15 17 Ways to Dismantle Information Security Governance Efforts
• Index