HOW TO BE YOUR COMPANY'S SECURITY DIRECTOR PDF Download

Author: Keith Smith Shannon
Publisher: Charles C Thomas Publisher
ISBN: 0398082545
Category : Corporations
Languages : en
Pages : 140

View

Book Description
The intent of this book is to give a working business professional a realistic review of security issues that a business may have to deal with on an everyday basis. Many texts have been written discussing these issues in great detail offering solutions. While the value of these presentations is very worthwhile for the security professional, most management professionals need a more simple and workable way to deal with security problems. This presentation endeavors to outline security remedies and options on a level most useful for the average business professional. In many businesses, security management is assigned to administrative personnel not familiar with protection topics. This book will give those individuals a working knowledge of security issues and practices. It can be used as an informed starting point with which to deal with a security situation completely, or at best, give some general know ledge of the field if security professionals have to be called. This basic information can save a company money, and the person assigned the task can feel some level of comfort in dealing with the topic. The author emphasizes that the best methods for dealing with security problems are the simplest. Management desires a list of options from the security professional and then the best course of action has to be factored into the business life of the firm. The author shows how the best absolute security remedy will often not be the best overall action for the company, and that a combination of steps may have to be taken in order to address the problem.

Author: Troy Schumaker
Publisher: Frog Books
ISBN: 9781583940730
Category : Computers
Languages : en
Pages : 124

View

Book Description
With the exploding growth in today's e-business, Information Technology-based applications are the business. But the risks confronting these applications have never been greater. Cover Your Assets (CYA) is an e-business security manual with policies and procedures for senior managers to help-desk personnel. CYA strengthens existing business models by teaching you to identify protection gaps in both your tangible and intangible assets. Learn to develop a security plan tailored to your application needs and the size of your Web site. Whether you have existing or new applications, CYA shows you how to lock down tangible assets and recommends tools to prevent, detect, and react to security challenges. It analyzes quality assurance and takes you through the verification process. It even tells you how to safeguard the physical plant and meet the challenge of social engineers trying to sweet-talk their way to sensitive information. With an extensive glossary and annotated bibliography, CYA is required reading for everyone on your team.

Author: Tari Schreider, SSCP, CISM, C|CISO, ITIL Foundation
Publisher: Rothstein Publishing
ISBN: 1944480307
Category : Business & Economics
Languages : en
Pages : 164

View

Book Description
In today’s litigious business world, cyber-related matters could land you in court. As a computer security professional, you are protecting your data, but are you protecting your company? While you know industry standards and regulations, you may not be a legal expert. Fortunately, in a few hours of reading, rather than months of classroom study, Tari Schreider’s The Manager’s Guide to Cybersecurity Law: Essentials for Today’s Business, lets you integrate legal issues into your security program. Tari Schreider, a board-certified information security practitioner with a criminal justice administration background, has written a much-needed book that bridges the gap between cybersecurity programs and cybersecurity law. He says, “My nearly 40 years in the fields of cybersecurity, risk management, and disaster recovery have taught me some immutable truths. One of these truths is that failure to consider the law when developing a cybersecurity program results in a protective façade or false sense of security.” In a friendly style, offering real-world business examples from his own experience supported by a wealth of court cases, Schreider covers the range of practical information you will need as you explore – and prepare to apply – cybersecurity law. His practical, easy-to-understand explanations help you to: Understand your legal duty to act reasonably and responsibly to protect assets and information. Identify which cybersecurity laws have the potential to impact your cybersecurity program. Upgrade cybersecurity policies to comply with state, federal, and regulatory statutes. Communicate effectively about cybersecurity law with corporate legal department and counsel. Understand the implications of emerging legislation for your cybersecurity program. Know how to avoid losing a cybersecurity court case on procedure – and develop strategies to handle a dispute out of court. Develop an international view of cybersecurity and data privacy – and international legal frameworks. Schreider takes you beyond security standards and regulatory controls to ensure that your current or future cybersecurity program complies with all laws and legal jurisdictions. Hundreds of citations and references allow you to dig deeper as you explore specific topics relevant to your organization or your studies. This book needs to be required reading before your next discussion with your corporate legal department.

Author: Cathy Pitt
Publisher: Van Haren
ISBN: 9087537719
Category : Education
Languages : en
Pages : 257

View

Book Description
This book provides a first introduction into the field of Information security. Information security is about preserving your data, keeping private data private, making sure only the people who are authorized have access to the data, making sure your data is always there, always the way you left it, keeping your secrets secret, making sure you trust your sources, and comply with government and industry regulations and standards. It is about managing your risks and keeping the business going when it all goes south.Every new security practitioner should start with this book, which covers the most relevant topics like cloud security, mobile device security and network security and provides a comprehensive overview of what is important in information security. Processes, training strategy, policies, contingency plans, risk management and effectiveness of tools are all extensively discussed.

Author: Philip Alexander
Publisher: Bloomsbury Publishing USA
ISBN: 0313345597
Category : Computers
Languages : en
Pages : 187

View

Book Description
Organizations with computer networks, Web sites, and employees carrying laptops and Blackberries face an array of security challenges. Among other things, they need to keep unauthorized people out of the network, thwart Web site hackers, and keep data safe from prying eyes or criminal hands. This book provides a high-level overview of these challenges and more. But it is not for the hard-core IT security engineer who works full time on networks. Instead, it is aimed at the nontechnical executive with responsibility for ensuring that information and assets stay safe and private. Written by a practicing information security officer, Philip Alexander, the book contains the latest information and arms readers with the knowledge they need to make better business decisions. Information Security: A Manager's Guide to Thwarting Data Thieves and Hackers covers the following technical issues in a nontechnical manner: -The concept of defense in depth -Network design -Business-continuity planning -Authentication and authorization -Providing security for your mobile work force -Hackers and the challenges they can present -Viruses, Trojans, and worms But it doesn't stop there. The book goes beyond the technical and covers highly important topics related to data security like outsourcing, contractual considerations with vendors, data privacy laws, and hiring practices. In short, Alexander gives the reader a 360-degree look at data security: What to be worried about; what to look for; the tradeoffs among cost, efficiency, and speed; what different technologies can and can't do; and how to make sure technical professionals are keeping their eyes on the right ball. Best of all, it conveys information in an understandable way, meaning managers won't need to rely solely on the IT people in their own company—who may speak an entirely different language and have entirely different concerns. Hackers and data thieves are getting smarter and bolder every day. Information Security is your first line of defense.

Author: Carl Young
Publisher: Syngress
ISBN: 9781856179799
Category : Computers
Languages : en
Pages : 296

View

Book Description
Security problems have evolved in the corporate world because of technological changes, such as using the Internet as a means of communication. With this, the creation, transmission, and storage of information may represent security problem. Metrics and Methods for Security Risk Management is of interest, especially since the 9/11 terror attacks, because it addresses the ways to manage risk security in the corporate world. The book aims to provide information about the fundamentals of security risks and the corresponding components, an analytical approach to risk assessments and mitigation, and quantitative methods to assess the risk components. In addition, it also discusses the physical models, principles, and quantitative methods needed to assess the risk components. The by-products of the methodology used include security standards, audits, risk metrics, and program frameworks. Security professionals, as well as scientists and engineers who are working on technical issues related to security problems will find this book relevant and useful. Offers an integrated approach to assessing security risk Addresses homeland security as well as IT and physical security issues Describes vital safeguards for ensuring true business continuity

Author: Todd Barnum
Publisher: "O'Reilly Media, Inc."
ISBN: 1492076163
Category : Computers
Languages : en
Pages : 143

View

Book Description
If you're a cybersecurity professional, then you know how it often seems that no one cares about (or understands) information security. InfoSec professionals frequently struggle to integrate security into their companies' processes. Many are at odds with their organizations. Most are under-resourced. There must be a better way. This essential manager's guide offers a new approach to building and maintaining an information security program that's both effective and easy to follow. Author and longtime chief information security officer (CISO) Todd Barnum upends the assumptions security professionals take for granted. CISOs, chief security officers, chief information officers, and IT security professionals will learn a simple seven-step process for building a new program or improving a current one. Build better relationships across the organization Align your role with your company's values, culture, and tolerance for information loss Lay the groundwork for your security program Create a communications program to share your team's contributions and educate your coworkers Transition security functions and responsibilities to other teams Organize and build an effective InfoSec team Measure your company's ability to recognize and report security policy violations and phishing emails

Author:
Publisher:
ISBN:
Category :
Languages : en
Pages : 60

View

Book Description
For more than 40 years, Computerworld has been the leading source of technology news and information for IT influencers worldwide. Computerworld's award-winning Web site (Computerworld.com), twice-monthly publication, focused conference series and custom research form the hub of the world's largest global IT media network.

Author: Bradley A. Wayland
Publisher: Butterworth-Heinemann
ISBN: 0128006218
Category : Social Science
Languages : en
Pages : 256

View

Book Description
Security for Business Professionals offers business executives and managers everything they need to set-up a security program, especially for those who don’t have the resources to hire an in-house security staff. It can also be used for assessing the adequacy of an existing security program. The book provides an overview of the key security objectives and challenges that managers face, such as how to measure the effectiveness of a security program and balance the costs and benefits. It also shows how to develop security procedures that conform to key regulatory requirements, and how to assess an organization’s most important risks, vulnerabilities, and threats. Security for Business Professionals addresses key physical and informational security concerns, including areas such as asset protection, loss prevention, and personnel security. It also discusses how to develop emergency and incident response plans, and concludes with suggested safety and security exercises and training recommendations. Written in an introductory and accessible way for those new to security. Illustrates key concepts with case studies and real-world examples from a wide variety of industries. Provides recommended readings and checklists for more in-depth coverage of each topic.

Author: Christina M. Holbrook
Publisher: Routledge
ISBN: 1315352664
Category : Social Science
Languages : en
Pages : 112

View

Book Description
Workplace Violence: Issues in Threat Management defines what workplace violence is, delves into the myths and realities surrounding the topic and provides readers with the latest statistics, thinking, and strategies in the prevention of workplace violence. The authors, who themselves have implemented successful workplace violence protection programs, guide novice and experienced practitioners alike in the development of their own programs.