Outsourcing Information Security
1st Edition
Published on 1. January 2003
266 pages
978-1-58053-955-5 (ISBN)
Description
This comprehensive and timely resource examines security risks related to IT outsourcing, clearly showing you how to recognize, evaluate, minimize, and manage these risks. Unique in its scope, this single volume offers you complete coverage of the whole range of IT security services and fully treats the IT security concerns of outsourcing. The book helps you deepen your knowledge of the tangible and intangible costs and benefits associated with outsourcing IT and IS functions.
More details
Other editions
Additional editions
C. Warren Axelrod
Outsourcing Information Security
Book
10/2004
Artech House Publishers
€99.36
Shipment within 10-20 days
Content
- Intro
- Table of Contents
- Foreword
- Preface
- Acknowledgments
- 1 Outsourging and Information Security
- First . Some Definitions
- Second . A Clarification
- Y2K as a Turning Point
- The Post Y2K Outsourcing Speed Bump
- Shaky Managed Security Services Providers
- A Prognosis
- The Information Security Market
- References
- 2 Information Security Risks
- Threats
- Vulnerabilities
- Summary
- References
- 3 Justifying Outsourcing
- Professed Reasons to Outsource
- The Basis for Decision
- Reasons for Considering Outsourcing
- The Other Side of the Outsourcing Decision
- References
- 4 Risks of Outsourcing
- Loss of Control
- Quality of Service
- The Issue of Trust
- Performance of Applications and Services
- Lack of Expertise
- Hidden and Uncertain Costs
- Limited Customization and Enhancements
- Knowledge Transfer
- Shared Environments
- Legal and Regulatory Matters
- Summary and Conclusion
- References
- 5 Categorizing Costs and Benefits
- Structured, Unbiased Analysis-The Ideal
- Costs and Benefits
- Next Chapter
- Reference
- 6 Costs and Benefits Throughout the Evaluation Process
- Triggering the Process
- Different Strokes
- Analysis of Costs and Benefits
- Requests for Information and Proposals-Costs
- Requests for Information/Proposal-Benefits
- Refining the Statement of Work (SOW)
- Service Level Agreement (SLA)
- References
- 7 The Outsourcing Evaluation Process-Customer and Outsourcer Requirements
- Investment Evaluation Methods
- Structure of the Chapter
- The Gathering of Requirements
- Business Requirements
- Viability of Service Provider
- Service Requirements
- Technology Requirements
- References
- 8 Outsourcing Security Functions and Security Considerations When Outsourcing
- Security Management Practices
- Asset Classification and Control
- Application and System Development
- Operations Security and Operational Risk
- Security Models and Architecture
- Physical and Environmental Security
- Telecommunications and Network Security
- Cryptography
- Disaster Recovery and Business Continuity
- Legal Action
- Summary
- References
- 9 Summary of the Outsourcing Process-Soup to Nuts
- Appendix A
- Appendix B
- Appendix C
- Selected Bibliography
- About the Author
- Index
