Information Risk Management: A practitioner’s guide

CONTENTS

List of figures and tables

Author

Acknowledgements

Abbreviations

Definitions, standards and glossary of terms

Preface

1. THE NEED FOR INFORMATION RISK MANAGEMENT

Introduction

What is information?

The information life cycle

Who should use information risk management?

The legal framework

The context of risk in the organisation

The benefits of taking account of information risk

Overview of the information risk management process

2. REVIEW OF INFORMATION SECURITY FUNDAMENTALS

Information Classification

Plan, Do, Check, Act

3. THE INFORMATION RISK MANAGEMENT PROGRAMME

Goals, scope and objectives

Roles and responsibilities

Governance of the risk management programme

Information risk management criteria

4. RISK IDENTIFICATION

The approach ...