Information Security Management Handbook, Volume 6, 6th Edition

Chapter 16

Design of Information Security for Large System Development Projects

James C. Murphy

Information security professionals (ISPs) provide a number of services within their organizations to employ. Certified ISPs are expected to be engaged in all the domains of the Security Common Body of Knowledge (CBK) (Table 16.1), demonstrating active expertise in a few and broad knowledge in the remainder. Some ISPs are more traditional—documenting policies and procedures, training users, implementing access control technologies, tracking network activities, ...