Information Security Management Principles, 3rd Edition

CONTENTS

Figures and tables

Authors

Acknowledgements

Abbreviations

Preface

1. INFORMATION SECURITY PRINCIPLES

Concepts and definitions

The need for, and benefits of, information security

Sample questions

2. INFORMATION RISK

Threats to, and vulnerabilities of, information systems

Risk management

Sample questions

References and further reading

3. INFORMATION SECURITY FRAMEWORK

Organisation and responsibilities

Organisational policy, standards and procedures

Information security governance

Information assurance programme implementation

Security incident management

Legal framework

Security standards and procedures

Sample questions

References

4. SECURITY LIFE CYCLES

The information life cycle

Testing, audit and review

Systems development and support ...