Security Planning

An Applied Approach

Susan Lincke (Autor)

Buch | Hardcover

XIV, 287 Seiten

2015 | 2015
Springer International Publishing (Verlag)
978-3-319-16026-9 (ISBN)

Infos

This book guides readers through building an IT security plan. Offering a template, it helps readers to prioritize risks, conform to regulation, plan their defense and secure proprietary/confidential information. The process is documented in the supplemental online security workbook. Security Planning is designed for the busy IT practitioner, who does not have time to become a security expert, but needs a security plan now. It also serves to educate the reader of a broader set of concepts related to the security environment through the Introductory Concepts and Advanced sections. The book serves entry level cyber-security courses through those in advanced security planning. Exercises range from easier questions to the challenging case study. This is the first text with an optional semester-long case study: Students plan security for a doctor's office, which must adhere to HIPAA regulation. For software engineering-oriented students, a chapter on secure software development introduces security extensions to UML and use cases (with case study). The text also adopts the NSA's Center of Academic Excellence (CAE) revamped 2014 plan, addressing five mandatory and 15 Optional Knowledge Units, as well as many ACM Information Assurance and Security core and elective requirements for Computer Science.

Autor

Susan Lincke PhD is a Certified Information Systems Auditor with both industry and academic experience, able to know what is important in industry and how to teach it. Materials were funded by a National Science Foundation grant, where students planned security for real community partners.

Inhalt

Preface.- Security Awareness.- Combatting Fraud.- Complying with Security Regulation and Standards.- Managing Risk.- Addressing Business Impact Analysis and Business Continuity.- Governing.- Important Tactical Concepts.- Planning for Network Security.- Designing Physical Security.- Organizing Personal Security.- Planning for Incident Response.- Defining Security Metrics.- Performing an Audit or Security Test.- Complying with HIPAA and HITECH.- Developing Secure Software.

Rezensionen

"The book is short, and the author was thoughtful enough ... to help the reader by indicating what each user needs. ... It is thoughtfully written and informative ... . These should most certainly be read by everyone involved in computing at every organization. ... I recommend this book." (Mordechai Ben-Menachem, Computing Reviews, December, 2015)

Produkt-Details

• Erscheint lt. Verlag: 25.6.2015
• Zusatzinfo: XIV, 287 p. 65 illus.
• Verlagsort: Cham
• Sprache: englisch
• Maße: 155 x 235 mm
• Gewicht: 590 g
• Themenwelt: Informatik ► Netzwerke ► Sicherheit / Firewall
• Schlagworte: Audit • Computer Science • cybersecurity • Data security standard • Fraud/social engineering • HIPAA regulation • Information Security • Information Technology • management information systems • Risk Management • Secure software development • Security planning • Security standards and regulation
• ISBN-10: 3-319-16026-5 / 3319160265
• ISBN-13: 978-3-319-16026-9 / 9783319160269
• Zustand: Neuware