|
|
|
|
|
|
|
|
1. |
Record Nr. |
UNINA9910165026703321 |
|
|
Autore |
Gibson Darril |
|
|
Titolo |
Managing risk in information systems / / Darril Gibson |
|
|
|
|
|
Pubbl/distr/stampa |
|
|
Burlington, Massachusetts : , : Jones & Bartlett Learning, , 2015 |
|
©2015 |
|
|
|
|
|
|
|
|
|
ISBN |
|
|
|
|
|
|
Edizione |
[Second edition.] |
|
|
|
|
|
Descrizione fisica |
|
1 online resource (548 pages) : illustrations |
|
|
|
|
|
|
Collana |
|
Jones & Bartlett Learning Information Systems Security & Assurance Series |
|
|
|
|
|
|
|
|
Disciplina |
|
|
|
|
|
|
Soggetti |
|
Computer security |
Electronic information resources - Access control |
|
|
|
|
|
|
|
|
Lingua di pubblicazione |
|
|
|
|
|
|
Formato |
Materiale a stampa |
|
|
|
|
|
Livello bibliografico |
Monografia |
|
|
|
|
|
Note generali |
|
Bibliographic Level Mode of Issuance: Monograph |
|
|
|
|
|
|
Nota di bibliografia |
|
Includes bibliographical references and index. |
|
|
|
|
|
|
Nota di contenuto |
|
Pt. 1. Risk management business challenges -- Risk management fundamentals -- Managing risk : threats, vulnerabilities, and exploits -- Maintaining compliance -- Developing a risk management plan -- pt. 2. Mitigating risk -- Defining risk assessment approaches -- Performing a risk assessment -- Identifying assets and activities to be protected -- Identifying and analyzing threats, vulnerabilities, and exploits -- Identifying and analyzing risk mitigation security controls -- Planning risk mitigation throughout your organization -- Turning your risk assessment into a risk mitigation plan -- pt 3. Risk mitigation plans -- Mitigating risk with a business impact analysis -- Mitigating risk with a business continuity plan -- Mitigating risk with a disaster recovery plan -- Mitigating risk with a computer incident response team plan. |
|
|
|
|
|
|
|
|
Sommario/riassunto |
|
PART OF THE JONES & BARTLETT LEARNING INFORMATION SYSTEMS SECURITY & ASSURANCE SERIES Revised and updated with the latest data in the field, the Second Edition of Managing Risk in Information Systems provides a comprehensive overview of the SSCP® Risk, Response, and Recovery Domain in addition to providing a thorough overview of risk management and its implications on IT infrastructures and compliance. Written by industry experts, and using a wealth of examples and exercises, this book incorporates hands-on activities to |
|
|
|
|