Information Security Management Principles: An ISEB Certificate

0.0

'The security of personal information has never been of greater concern to the public. If the public's trust in those who hold their personal details is to be improved then information security cannot be left to chance. Implementing effective information security management principles is essential. The BCS provides valuable leadership in this area and this is a timely contribution to a vital process. Demand for access to fast, reliable data is driving our information economy. But as work and leisure become increasingly digitised and mobile, new risks are emerging which threaten the very information that help business and society function. By focusing on the three main areas of information assurance ' confidentiality, integrity and availability' Information Security Management Principles provides business and IT managers with the skills to identify these threats and protect against them. Key areas covered include: Risk management Information security implementation Networks and communications Cryptography Business continuity and disaster recovery

0.0

The authors are at the forefront of information security, helping shape policy and implement best practice at organisations including the Home Office, British Airways, GCHQ, Marks and Spencer, the MoD, RAF and O2. As members of the ISEB Exam Panel, they are responsible for setting the course content and syllabus. Table of Contents Information Security Principles: Concepts and definitions The need for, and benefits of, information security Information Risk: Threats to, and vulnerabilities of, information systems Risk management References and further reading Information Security Framework: Information security management Policy, standards and procedures Information security governance Security incident management Information security implementation Legal framework Security standards and procedures Information Security Controls: Protection from malicious software People User access controls Networks and communications External services IT infrastructure IT testing, audit and review Systems development and support The role of cryptography Training Physical and environmental security Disaster recovery and business continuity management Investigations and forensics Notes Reference and further reading Index