Information Assurance and Risk Management Strategies

Learn how to deploy information assurance risk management strategies that align with the National Institute of Standards and Technology's recommendations. This book will show you how to implement information assurance risk management strategies within your organization.

Aimed at system administrators and cybersecurity practitioners, author Bradley Fowler first walks you through how to assess known risks in your organization, understand why using a risk mitigation security strategy control profile is essential, and how to create one for your organization. You will then learn how to develop a risk factor table, outlining descriptions for each risk factor within your organization and which software applications you'll need to rely on for daily business communication and operations. You will also see how to assess and categorize the level of risk within each technology tool, as well as the impact of an information security breach on the organization.

As you progress through the book, you'll review privacy issues relating to your organization, develop and manage a privacy compliance risk profile, and develop and manage a privacy compliance control profile. Additionally, you will gain insight into creating a privacy compliance risk mitigation strategy that helps protect your organization even as security threats evolve. Take the first step to safeguarding your company's highly valuable information assets today!

What You'll Learn

• Understand what information assurance is and how it relates to risk management strategies
• Assess, develop, implement, and manage risk management strategies for corporate information systems, technology, and cloud environments
• Develop and utilize information usage profiles and risk factor tables
• Understand the value of data encryption and usage of private and public key exchange for information assurance and security

Who This Book Is For

Information system and cloud architects responsible for developing, implementing, and managing corporate information systems and cloud environments.