Information Security Handbook

By adopting a unified approach, this book aims to cover information security and analyze in depth the management controls, both technical and administrative, needed to ensure good levels of security. The first part deals with the non-technical areas of policy formulation, risk management, contingency planning, the law and auditing. The second half, which builds upon the foundation of the earlier chapters, covers the technical areas of cryptography, access control, database security, communications security and security modelling.