Table of Contents
Preface
Part 1: Setting the Stage – Definitions, Concepts, Principles, Standards, and Certifications
1
Foundations, Standards, and Principles of Information Security
The CIA triad
Confidentiality
Integrity
Availability
Information security standards
The ISO/IEC 27000 family of information security standards
Payment Card Industry Data Security Standard (PCI DSS)
Federal Information Security Management Act (FISMA)
Health Insurance Portability and Accountability Act (HIPAA)
NIST Cybersecurity Framework (NIST CSF)
SOC reporting
Using an information security management system
Why is an ISMS important?
Key factors of an effective ISMS
The ISO 27000 series
ISO/IEC 27001
ISO/IEC 27006
ISO/IEC 27002
ISO/IEC 27003
ISO/IEC 27004
ISO/IEC ...
Get Mastering Information Security Compliance Management now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.