This book aims to demonstrate the use of business-driven risk assessments to address government regulations and guidelines specific to the management of risks related to all third-party arrangements and emphasises that organisations retain accountability for business activities, functions and services outsourced to a third party.
This book introduces the cyber risk investment model and the cybersecurity risk management framework used within business-driven risk assessments to address government regulations, industry standards and applicable laws. This can be used by various stakeholders who are involved in the implementation of cybersecurity measures to safeguard sensitive data. This framework facilitates an organisation's risk management decision-making process to demonstrate the mechanisms in place to fund cybersecurity measures and demonstrates the application of the process showcasing three case studies. This book also discusses the elements used within the cybersecurity risk management process and defines a strategic approach to minimise cybersecurity risks.
Features:
Aims to strengthen the reader's understanding of industry governance, risk and compliance practices.
Incorporates an innovative approach to assess business risk management.
Explores the strategic decisions made by organisations when implementing cybersecurity measures and leverages an integrated approach to include risk management elements.
Sprache
Verlagsort
Verlagsgruppe
Zielgruppe
Für Beruf und Forschung
Professional Practice & Development, Professional Reference, and Professional Training
Illustrationen
24 s/w Tabellen, 11 s/w Zeichnungen, 14 s/w Photographien bzw. Rasterbilder, 25 s/w Abbildungen
24 Tables, black and white; 11 Line drawings, black and white; 14 Halftones, black and white; 25 Illustrations, black and white
Maße
Höhe: 240 mm
Breite: 161 mm
Dicke: 18 mm
Gewicht
ISBN-13
978-1-032-95935-1 (9781032959351)
Copyright in bibliographic data and cover images is held by Nielsen Book Services Limited or by the publishers or by their respective licensors: all rights reserved.
Schweitzer Klassifikation
Sherita-Tara (Tara) Kissoon, MSc, MBA, CISSP, CISA, is a multi-certified I.T. Risk & Security Leader with twenty-five years of technology experience, twenty years of experience in the financial services industry focusing on technology, cybersecurity, governance, risk and compliance, along with professional and community volunteering. Tare actively volunteering at ISACA, ISC2, University of London and St. Patrick's Parish in Markham, and have attained my Enhanced Police Information Check (E-PIC), Vulnerable Sector Check, NEXUS, Biometrics, Bail Verification and maintain medical records for identity verification, to volunteer/work in high-risk communities, and cross borders as a trusted traveler.
Tara Kissoon is a multi-certified I.T. Risk & Security Leader with 25+ years of technology experience, 20 years of executive experience in the financial services industry. She brings continued success on leading Technology, I.T. Risk and Information Security projects and programs within large organizations. She is acknowledged as a leader and trusted advisor with a talent for effective resource management, steering traditional and diverse cross-functional staff to achieve short and long-term business objectives. Relevant Publication include (ORCID: 0000-0001-6903-1938) - 1) Book (2024): Routledge (Taylor & Francis) Optimal Spending on Cybersecurity Measures: Protecting Health Information 2) Book (2024): Routledge (Taylor & Francis) Optimal Spending on Cybersecurity Measures: Digital Privacy and Data Protection 3) Book (2024): Routledge (Taylor & Francis) Optimal Spending on Cybersecurity Measures: DevOps, 4) Book (2022): Routledge (Taylor & Francis) Optimal Spending on Cybersecurity Measures: Risk Management, 5) Article (2021): Journal of Information Security (Vol.12 No.1, Jan 2021) - Optimum Spending on Cybersecurity Measures Part II, 6) Article (2020): Emerald Publishing Limited - Optimum Spending on Cybersecurity Measures, 7) ISACA TIPs column (2012 - 2014), and 8) ISACA Online Journal (2008): Strengthening Access using Smart Cards. CV is enclosed.
1. Introduction, 2. Privacy Laws, 3. Data Protection, 4. Third-Party Risk Management, 5. Technology and Cyber Risk, 6. Governance, 7. Cybersecurity Risk Management Framework, 8. Case Study #1: Chime Live, 9. Case Study #2: Alumni Learning Consortium, 10. Case Study #3: Marketing Automation Tool
