(ISC)2 SSCP Systems Security Certified Practitioner Official Study Guide, 3rd Edition

PART IIIntegrated Risk Management and Mitigation

Part 2 provides you with a roadmap toward a proactive defense. You’ll see how to manage risks to the confidentiality, integrity, and availability of the information assets your organization depends on. This requires you to have a solid understanding of what risk is (and is not!). We’ll show how information risk management is all about providing a cost-effective integrated defense—a set of interlocking, layered strategies; tactical procedures; and operational details that reduce the potential impact of the occurrence of information risks. Integrating all elements of your information defense posture and strategy is key to making defense in depth work—and not allowing it to become an outmoded ...