Assessing and Managing Security Risk in IT Systems
A Structured Methodology
Published on 12. August 2004
288 pages
978-0-203-49042-6 (ISBN)
Description
This book begins with an overview of information systems security, offering the basic underpinnings of information security and concluding with an analysis of risk management. Part II describes the McCumber Cube, providing the original paper from 1991 and detailing ways to accurately map information flow in computer and telecom systems. It also explains how to apply the methodology to individual system components and subsystems. Part III serves as a resource for analysts and security practitioners who want access to more detailed information on technical vulnerabilities and risk assessment analytics. McCumber details how information extracted from this resource can be applied to his assessment processes.
More details
Language
English
Place of publication
London
United Kingdom
Publishing group
Taylor & Francis Ltd
Target group
Professional and scholarly
Information security professionals, Security consultants, IT auditors, students, ,information security management, IT management with security responsibility, Senior security management (e.g. Chief Security Officer)
Illustrations
35 s/w Abbildungen, 16 s/w Tabellen
35 b/w images and 16 tables
File size
4,25 MB
ISBN-13
978-0-203-49042-6 (9780203490426)
Copyright in bibliographic data and cover images is held by Nielsen Book Services Limited or by the publishers or by their respective licensors: all rights reserved.
Schweitzer Classification
Other editions
Additional editions
Book
08/2004
1st Edition
Auerbach
€104.50
Shipment within 15-20 days
Content
SECTION I SECURITY CONCEPTS 1 Using Models 2 Defining Information Security 3 Information as an Asset 4 Understanding Threat and Its Relation to Vulnerabilities, 5 Assessing Risk Variables: The Risk Assessment Process, SECTION II THE McCUMBER CUBE METHODOLOGY 6 The McCumber Cube 7 Determining Information States and Mapping Information Flow, 8 Decomposing the Cube for Security Enforcement, 9 Information State Analysis for Components and Subsystems, 10 Managing the Security Life Cycle, 11 Safeguard Analysis, 12 Practical Applications of McCumber Cube Analysis, SECTION III APPENDICES
