Text
The Security risk assessment handbook: a complete guide for performing security risk assessments
"The Security Risk Assessment Handbook: A Complete Guide for Performing Security Risk Assessments provides detailed insight into precisely how to conduct an information security risk assessment. Designed for security professionals and their customers who want a more in-depth understanding of the risk assessment process, this volume contains real-world advice that promotes professional development. It also enables security consumers to better negotiate the scope and rigor of a security assessment, effectively interface with a security assessment team, deliver insightful comments on a draft report, and have a greater understanding of final report recommendations.This book can save time and money by eliminating guesswork as to what assessment steps to perform, and how to perform them. In addition, the book offers charts, checklists, examples, and templates that speed up data gathering, analysis, and document development. By improving the efficiency of the assessment process, security consultants can deliver a higher-quality service with a larger profit margin.
The text allows consumers to intelligently solicit and review proposals, positioning them to request affordable security risk assessments from quality vendors that meet the needs of their organizations"--; Provided by publisher.; "The Security Risk Assessment Handbook: A Complete Guide for Performing Security Risk Assessments provides detailed insight into precisely how to conduct an information security risk assessment from a practical point of view. Designed for security professionals who want a more in-depth understanding of the risk assessment process, this volume contains real-world advice that promotes professional development and experience. It also enables security consumers to better negotiate the scope and rigor of a security assessment, effectively interface with a security assessment team, deliver insightful comments on a draft report, and have a greater understanding of final report recommendations"--; Provided by publisher.; Includes bibliographical references and index.;
Contents:
Chapter 1. Introduction
Chapter 2. Information Security Risk Assessment Basics
Chapter 3. Project Definition
Chapter 4. Security Risk Assessment Preparation
Chapter 5. Data Gathering
Chapter 6. Administrative Data Gathering
Chapter 7. Technical Data Gathering
Chapter 8. Physical Data Gathering
Chapter 9. Security Risk Analysis
Chapter 10. Security Risk Mitigation
Chapter 11. Security Risk Assessment Reporting
Chapter 12. Security Risk Assessment Project Management
Chapter 13. Security Risk Assessment Approaches
Index
No other version available