Mensys Online Shop

A Practical Guide to Security

Category:General - Books By:Auerbach Publications
More info:www.auerbach-publica...Author(s):Sudhanshu Kairab
Pages:498Year of publication:2005

- Provides a detailed step-by-step methodology for performing an information security assessment
- Details the history of information security and its evolution as a discipline- Covers ISO 17799, COBIT, and other standards
- Includes a HIPAA questionnaire containing questions that map to all HIPAA secruity requirements
- Contains  » Read more...
A Practical Guide to Security

Select one or more articles and then press Order. Quantities can be changed on the next page.
Partnr.DescriptionEuro *US$Euro incl. VAT 
H45898 A Practical Guide to Security Assessments66.8990.2770.90

All prices are in Euro excl. VAT (19%, for books 6%) and excl. shipping.
E-mail or call us at +31 (0)23 548 20 20 for licences, upgrades and other questions.

- Provides a detailed step-by-step methodology for performing an information security assessment
- Details the history of information security and its evolution as a discipline- Covers ISO 17799, COBIT, and other standards
- Includes a HIPAA questionnaire containing questions that map to all HIPAA secruity requirements
- Contains questionnaires that cover common areas of information security
- All questionnaires contain guidance to provide the user with a detailed explanation of why a question is relevant and what some of the potential related risks are
- Offers more than 200 questions to ask during assessments
A Practical Guide to Security Assessments is a process-focused approach that presents a structured methodology for conducting assessments. The key element of the methodology is an understanding of business goals and processes, and how security measures are aligned with business risks. The guide also emphasizes that resulting security recommendations should be cost-effective and commensurate with the security risk. The methodology described serves as a foundation for building and maintaining an information security program.
In addition to the methodology, the book includes an Appendix that contains questionnaires that can be modified and used to conduct security assessments.