This new edition of Risk Analysis and Security Countermeasure Selection presents updated case studies and introduces existing and new methodologies and technologies for addressing existing and future threats. It covers risk analysis methodologies approved by the U.S. Department of Homeland Security and shows how to apply them to other organizations, public and private. It also helps the reader understand which methodologies are best to use for a particular facility and demonstrates how to develop an efficient security system.
Drawing on over 35 years of experience in the security industry, Thomas L. Norman provides a single, comprehensive reference manual for risk analysis, countermeasure selection, and security program development. The security industry has a number of practitioners and consultants who lack appropriate training in risk analysis and whose services sometimes suffer from conflicts of interest that waste organizations' money and time. Norman seeks to fill the void in risk analysis training for those security consultants, thereby reducing organizations' wasting of resources and potential vulnerability. This book helps you find ways to minimize cost and time spent in analyzing and countering security threats.
Risk Analysis and Security Countermeasure Selection, Second Edition gives invaluable insight into the risk analysis process while showing how to use analyses to identify and create the most cost efficient countermeasures. It leads you from a basic to an advanced level of understanding of the risk analysis process. The case studies illustrate how to put each theory into practice, including how to choose and implement countermeasures and how to create budgets that allow you to prioritize assets according to their relative risk and select appropriate countermeasures according to their cost effectiveness.
Rezensionen / Stimmen
"This book, like its predecessor, will become a desk reference used by security professionals everywhere. Like any great reference work, it will be dog-eared, feathered with Post-It Notes, with handwriting scrawled in the margins."
-Ross Johnson
Praise for the First Edition:"Thomas L. Norman's Risk Analysis and Security Countermeasure Selection is a relentlessly practical book intended to aid security consultants"
-Jim Harper, The CATO Institute, US Counter-Terrorism Strategy and al-Qaeda, 2010
"... by following the guidance laid out in this detailed book, security managers can do it themselves with software that's probably already on their office computers... There is no doubt that Norman himself spent considerable time devising the process, which he presents in the book. He provides step-by-step lists for building various matrices ... definitely a book for the advanced security practitioner. ... it outlines an excellent methodology and is well worth the effort required to read it and work through the process outlined by the author."
- Glen Kitteringham, CPP, President of Kitteringham Security Group Inc., in Security Management, January 2011 Winner of the ASIS Security Industry Book of the Year award in 2016.
"This book, like its predecessor, will become a desk reference used by security professionals everywhere. Like any great reference work, it will be dog-eared, feathered with Post-It Notes, with handwriting scrawled in the margins."-Ross Johnson
Praise for the First Edition:
"Thomas L. Norman's Risk Analysis and Security Countermeasure Selection is a relentlessly practical book intended to aid security consultants."-Jim Harper, The CATO Institute, US Counter-Terrorism Strategy and al-Qaeda, 2010
"... by following the guidance laid out in this detailed book, security managers can do it themselves with software that's probably already on their office computers... There is no doubt that Norman himself spent considerable time devising the process, which he presents in the book. He provides step-by-step lists for building various matrices ... definitely a book for the advanced security practitioner. ... it outlines an excellent methodology and is well worth the effort required to read it and work through the process outlined by the author."- Glen Kitteringham, CPP, President of Kitteringham Security Group Inc., in Security Management, January 2011
Auflage
Sprache
Verlagsort
Verlagsgruppe
Zielgruppe
Für höhere Schule und Studium
Für Beruf und Forschung
Professional Practice & Development
Illustrationen
76 s/w Abbildungen
76 Illustrations, black and white
Maße
Höhe: 260 mm
Breite: 183 mm
Dicke: 30 mm
Gewicht
ISBN-13
978-1-4822-4419-9 (9781482244199)
Copyright in bibliographic data and cover images is held by Nielsen Book Services Limited or by the publishers or by their respective licensors: all rights reserved.
Schweitzer Klassifikation
Thomas L. Norman, CPP/PSP/CSC, is an internationally acclaimed security risk management consultant with more than 35 years of experience working in the United States, the Middle East, Europe, Africa, and Asia. He is the author of the industry reference manual on integrated security system design. He has developed formulas and processes that are used by the entire security industry to calculate the effectiveness of security programs and overall security program cost-effectiveness. His published works have been quoted and referenced by organizations such as the Cato Institute, the National Broadcasting Company, and Security Management.
Preface. Acknowledgments. Author. Risk Analysis: The Basis for Appropriate and Economical Countermeasures. Risk Analysis Basics and DHS-Approved Risk Analysis Methods. Risk Analysis Skills and Tools. Critical Thinking and the Risk Analysis Process. Asset Characterization and Identification. Criticality and Consequence Analysis. Threat Analysis. Assessing Vulnerability. Estimating Probability. Risk Analysis Process. Prioritizing Risk. Security Policy Introduction. Security Policy and Countermeasure Goals. Developing Effective Security Policies. Countermeasure Goals and Strategies. Types of Countermeasures. Countermeasure Selection and Budgeting Tools. Security Effectiveness Metrics. Cost Effectiveness Metrics. Writing Effectiveness Reports.
