Information Risk Management

A practitioner's guide

David Sutton

• Publisher: BCS, The Chartered Institute for IT
• Year: 2014
• Print ISBN: 9781780172651
• eBook ISBN: 9781780172668
• Edition: 1
• Topic: Computer Science
• Subtopic: Information Management
• Index: Computer Science

Increasingly, organisations rely on information for their day-to-day operations, and the loss or unavailability of information can mean the difference between success and ruin. Information risk management (IRM) is about identifying, assessing and prioritising risks to keep information secure and available. This accessible book is a practical guide to understanding the principles of IRM and developing a strategic approach to an IRM programme. It also includes a chapter on applying IRM in the public sector. It is the only textbook for the BCS Practitioner Certificate in Information Risk Management.

Table of contents

• Cover
• Copyright
• CONTENTS
• LIST OF FIGURES AND TABLES
• AUTHOR
• ACKNOWLEDGMENTS
• ABBREVIATIONS
• DEFINITIONS, STANDARDS AND GLOSSARY OF TERMS
• PREFACE
• 1 THE NEED FOR INFORMATION RISK MANAGEMENT
• 2 REVIEW OF INFORMATION SECURITY FUNDAMENTALS
• 3 THE INFORMATION RISK MANAGEMENT PROGRAMME
• 4 RISK IDENTIFICATION
• 5 THREAT AND VULNERABILITY ASSESSMENT
• 6 RISK ANALYSIS AND RISK EVALUATION
• 7 RISK TREATMENT
• 8 RISK REPORTING AND PRESENTATION
• 9 COMMUNICATION, CONSULTATION, MONITORING AND REVIEW
• 10 THE CESG IA CERTIFICATION SCHEME
• 11 HMG SECURITY-RELATED DOCUMENTS
• APPENDIX A TAXONOMIES AND DESCRIPTIONS
• APPENDIX B TYPICAL THREATS AND HAZARDS
• APPENDIX C TYPICAL VULNERABILITIES
• APPENDIX D INFORMATION RISK CONTROLS
• APPENDIX E METHODOLOGIES, GUIDELINES AND TOOLS
• APPENDIX F TEMPLATES
• APPENDIX G HMG CYBER SECURITY GUIDELINES
• APPENDIX H REFERENCES AND FURTHER READING
• INDEX
• Back Cover