LATEST DISCOUNTS & SALES: PROMOTIONS

Close Notification

Your cart does not contain any items

$252

Hardback

Not in-store but you can order this
How long will it take?

QTY:

English
Auerbach
11 June 2004
Information Security Policies and Procedures: A

Practitioner's Reference, Second Edition illustrates how policies and procedures support the efficient running of an organization. This book is divided into two parts, an overview

of security policies and procedures, and an information security reference guide. This volume points out how security documents and standards are key elements in the business process that should never be undertaken to satisfy a perceived audit or security requirement. Instead, policies, standards, and procedures should exist only to support business objectives or mission requirements; they are elements that aid in the execution of management policies. The book emphasizes how

information security must be integrated into all aspects of

the business process. It examines the 12 enterprise-wide (Tier 1) policies, and maps information security requirements to each. The text also discusses the need for top-specific (Tier 2) policies and application-specific (Tier 3) policies and details how they map with standards and procedures.

I t may be tempting to download some organization's policies from the Internet, but Peltier cautions against that approach. Instead, he investigates how best to use examples of policies, standards, and procedures toward the achievement of goals. He analyzes the influx of national and international standards, and outlines how to effectively use them to meet the needs of your business.

By:  
Imprint:   Auerbach
Country of Publication:   United Kingdom
Edition:   2nd edition
Dimensions:   Height: 234mm,  Width: 156mm,  Spine: 27mm
Weight:   910g
ISBN:   9780849319587
ISBN 10:   0849319587
Pages:   408
Publication Date:  
Audience:   General/trade ,  Professional and scholarly ,  ELT Advanced ,  Undergraduate
Format:   Hardback
Publisher's Status:   Active
INFORMATION SECURITY POLICIES AND PROCEDURES. Introduction. Why manage this process as a project? Planning and preparation. Developing policies. Asset classification policy. Developing standards. Developing procedures. Creating a table of contents. Understanding how to sell policies, standards, and procedures. Appendix 1A Typical tier 1 policies. Appendix 1B Typical tier 2 policies. Appendix 1C  Sample standards manual. Appendix 1D Sample information security manual. INFORMATION SECURITY REFERENCE GUIDE. Introduction to information security. Fundamentals of information security. Employee responsibilities. Information classification. Information handling. Tools of information security. Information processing. Information security program administration. Baseline organization information security program. Appendix 2A.

Thomas R. Peltier

Reviews for Information Security Policies and Procedures: A Practitioner's Reference, Second Edition

“The path to information security is a long one, but in this book author Thomas Peltier makes the scenery attractive along the way. Peltier walks the reader through [the text] with clarity, completeness, and humor. ” — Security Management, June 2005


See Also