The Security Risk Assessment Handbook
A Complete Guide for Performing Security Risk Assessments
1st Edition
Published on 12. December 2005
Book
Hardback
504 pages
978-0-8493-2998-2 (ISBN)
Description
The Security Risk Assessment Handbook: A Complete Guide for Performing Security Risk Assessments provides detailed insight into precisely how to conduct an information security risk assessment. Designed for security professionals and their customers who want a more in-depth understanding of the risk assessment process, this volume contains real-world advice that promotes professional development. It also enables security consumers to better negotiate the scope and rigor of a security assessment, effectively interface with a security assessment team, deliver insightful comments on a draft report, and have a greater understanding of final report recommendations.
This book can save time and money by eliminating guesswork as to what assessment steps to perform, and how to perform them. In addition, the book offers charts, checklists, examples, and templates that speed up data gathering, analysis, and document development. By improving the efficiency of the assessment process, security consultants can deliver a higher-quality service with a larger profit margin.
The text allows consumers to intelligently solicit and review proposals, positioning them to request affordable security risk assessments from quality vendors that meet the needs of their organizations.
This book can save time and money by eliminating guesswork as to what assessment steps to perform, and how to perform them. In addition, the book offers charts, checklists, examples, and templates that speed up data gathering, analysis, and document development. By improving the efficiency of the assessment process, security consultants can deliver a higher-quality service with a larger profit margin.
The text allows consumers to intelligently solicit and review proposals, positioning them to request affordable security risk assessments from quality vendors that meet the needs of their organizations.
More details
Language
English
Place of publication
Bosa Roca
United States
Publishing group
Taylor & Francis Inc
Target group
College/higher education
Professional and scholarly
Security practitioners and security consumers, IT staff, security staff, and security consultants
Illustrations
119 s/w Tabellen, 33 s/w Abbildungen
119 Tables, black and white; 33 Illustrations, black and white
Dimensions
Height: 234 mm
Width: 156 mm
Weight
839 gr
ISBN-13
978-0-8493-2998-2 (9780849329982)
Copyright in bibliographic data and cover images is held by Nielsen Book Services Limited or by the publishers or by their respective licensors: all rights reserved.
Schweitzer Classification
Other editions
New editions
Douglas Landoll
The Security Risk Assessment Handbook
A Complete Guide for Performing Security Risk Assessments, Second Edition
Book
05/2011
2nd Edition
CRC Press
€160.94
Article exhausted; check for reprint
Persons
Content
Introduction
The Need for an Information Security Program
Elements of an Information Security Program
Common Core Information Security Practices
Security Risk Assessment
Related Activities
The Need for This Book
Who Is This Book For?
Information Security Risk Assessment Basics
Phase 1: Project Definition
Phase 2: Project Preparation
Phase 3: Data-gathering
Phase 4: Risk Analysis
Phase 5: Risk Mitigation
Phase 6: Risk Reporting and Resolution
Project Definition
Ensuring Project Success
Project Description
Security Risk Assessment Preparation
Introduce the Team
Review Business Mission
Identify Critical Systems
Identify Assets
Identifying Threats
Determine Expected Controls
Data Gathering
Sampling
The RIIOT Method of Data Gathering
Administrative Data Gathering
Threats and Safeguards
The RIIOT Method: Administrative Data Gathering
Technical Data Gathering
Technical Threats and Safeguards
The RIIOT Method: Technical Data Gathering
Physical Data Gathering
Physical Threats and Safeguards
The RIIOT Method: Physical Data Gathering
Security Risk Analysis
Determining Risk
Creating Risk Statements
Team Review of Security Risk Statements
Security Risk Mitigation
Selecting Safeguards
Safeguard Solution Sets
Establishing Risk Parameters
Security Risk Assessment Reporting
Cautions in Reporting
Pointers in Reporting
Report Structure
Document Review Methodology: Create the Report Using
a Top-Down Approach
Assessment Brief
Action Plan
Security Risk Assessment Project Management
Project Planning
Project Tracking
Taking Corrective Measures
Project Status Reporting
Project Conclusion and Wrap-up
Security Risk Assessment Approaches
Quantitative vs. Qualitative Analysis
Tools
Security Risk Assessment Methods
Appendix Relevant Standards and Regulations
GAISP
COBIT
ISO 17799
NIST Handbook
HIPAA: Security
Gramm-Leach-Bliley Act (GLB Act)
The Need for an Information Security Program
Elements of an Information Security Program
Common Core Information Security Practices
Security Risk Assessment
Related Activities
The Need for This Book
Who Is This Book For?
Information Security Risk Assessment Basics
Phase 1: Project Definition
Phase 2: Project Preparation
Phase 3: Data-gathering
Phase 4: Risk Analysis
Phase 5: Risk Mitigation
Phase 6: Risk Reporting and Resolution
Project Definition
Ensuring Project Success
Project Description
Security Risk Assessment Preparation
Introduce the Team
Review Business Mission
Identify Critical Systems
Identify Assets
Identifying Threats
Determine Expected Controls
Data Gathering
Sampling
The RIIOT Method of Data Gathering
Administrative Data Gathering
Threats and Safeguards
The RIIOT Method: Administrative Data Gathering
Technical Data Gathering
Technical Threats and Safeguards
The RIIOT Method: Technical Data Gathering
Physical Data Gathering
Physical Threats and Safeguards
The RIIOT Method: Physical Data Gathering
Security Risk Analysis
Determining Risk
Creating Risk Statements
Team Review of Security Risk Statements
Security Risk Mitigation
Selecting Safeguards
Safeguard Solution Sets
Establishing Risk Parameters
Security Risk Assessment Reporting
Cautions in Reporting
Pointers in Reporting
Report Structure
Document Review Methodology: Create the Report Using
a Top-Down Approach
Assessment Brief
Action Plan
Security Risk Assessment Project Management
Project Planning
Project Tracking
Taking Corrective Measures
Project Status Reporting
Project Conclusion and Wrap-up
Security Risk Assessment Approaches
Quantitative vs. Qualitative Analysis
Tools
Security Risk Assessment Methods
Appendix Relevant Standards and Regulations
GAISP
COBIT
ISO 17799
NIST Handbook
HIPAA: Security
Gramm-Leach-Bliley Act (GLB Act)