Information Security Fundamentals
Thomas R. Peltier
Auerbach Publications
Developing an information security program that adheres to the principle of security as a business enabler must be the first step in an enterprise’s effort to build an effective security program. Following in the footsteps of its bestselling predecessor, <i><b>Information Security Fundamentals, Second Edition</b></i> provides information security professionals with a clear understanding of the fundamentals of security required to address the range of issues they will experience in the field.<p>The book examines the elements of computer security, employee roles and responsibilities, and common threats. It discusses the legal requirements that impact security policies, including Sarbanes-Oxley, HIPAA, and the Gramm-Leach-Bliley Act. Detailing physical security requirements and controls, this updated edition offers a sample physical security policy and includes a complete list of tasks and objectives that make up an effective information protection program.<br>
<br>
• Includes ten new chapters<br>
• Broadens its coverage of regulations to include FISMA, PCI compliance, and foreign requirements<br>
• Expands its coverage of compliance and governance issues<br>
• Adds discussions of ISO 27001, ITIL, COSO, COBIT, and other frameworks<br>
• Presents new information on mobile security issues<br>
• Reorganizes the contents around ISO 27002<br>
 <br>
The book discusses organization-wide policies, their documentation, and legal and business requirements. It explains policy format with a focus on global, topic-specific, and application-specific policies. Following a review of asset classification, it explores access control, the components of physical security, and the foundations and processes of risk analysis and risk management.<br>
The text concludes by describing business continuity planning, preventive controls, recovery strategies, and how to conduct a business impact analysis. Each chapter in the book has been written by a different expert to ensure you gain the comprehensive understanding of what it takes to develop an effective information security program.<br>
• Provides a clear understanding of the foundations of the field and the range of issues that practitioners must address<br>
• Discusses the legal requirements that impact security policies, including Sarbanes-Oxley, HIPAA, and the Gramm-Leach-Bliley Act (GLBA)<br>
• Details physical security requirements and controls, and offers a sample physical security policy<br>
• Examines elements of the risk analysis process including asset definition, threat identification, and occurrence probability<br>
• Describes components of business continuity planning, explaining how to conduct a business impact analysis, and how to test a plan</p>