|
Information Security Management Handbook, Sixth Edition (Isc2 Press) | 
| Authors: Harold F. Tipton, Micki Krause
Publisher: CRC
Category: Book
List Price: $159.95
Buy New: $121.00
You Save: $38.95 (24%)
New (23) Used (4) from $121.00
Avg. Customer Rating:  40 reviews
Sales Rank: 271916
Media: Hardcover
Edition: 6
Number Of Items: 1
Pages: 3280
Shipping Weight (lbs): 6.4
Dimensions (in): 10.1 x 6.9 x 3.3
ISBN: 0849374952
Dewey Decimal Number: 005.8
EAN: 9780849374951
ASIN: 0849374952
Publication Date: May 14, 2007
Availability: Usually ships in 1-2 business days
|
| Editorial Reviews:
Product Description
Never before have there been so many laws designed to keep corporations honest. New laws and regulations force companies to develop stronger ethics policies and the shareholders themselves are holding publicly traded companies accountable for their practices. Consumers are also concerned over the privacy of their personal information and current and emerging legislation is reflecting this trend. Under these conditions, it can be difficult to know where to turn for reliable, applicable advice. pThe sixth edition of the bInformation Security Management Handbook /baddresses up-to-date issues in this increasingly important area. It balances contemporary articles with relevant articles from past editions to bring you a well grounded view of the subject. The contributions cover questions important to those tasked with securing information assets including the appropriate deployment of valuable resources as well as dealing with legal compliance, investigations, and ethics. Promoting the view that the management ethics and values of an organization leads directly to its information security program and the technical, physical, and administrative controls to be implemented, the book explores topics such as risk assessments; metrics; security governance, architecture, and design; emerging threats; standards; and business continuity and disaster recovery. The text also discusses physical security including access control and cryptography, and a plethora of technology issues such as application controls, network security, virus controls, and hacking. pUS federal and state legislators continue to make certain that information security is a board-level conversation and the bInformation Security Management Handbook, Sixth Edition/b continues to ensure that there you have a clear understanding of the rules and regulations and an effective method for their implementation.
|
| Customer Reviews: Read 35 more reviews...
 An absolute "must-have" for information security professionals June 7, 2008
Now in its sixth updated edition, Information Security Management Handbook is an in-depth reference for business executives and professionals as well as a technical resource for information management experts. Essays written by a diversity of expert authors cover complex issues of information security management: the latest laws and regulations designed to force corporations to strengthen their ethics policies, risk assessments, metrics, disaster recovery, and much more. From the many different types and uses of cryptography, to effective implementation of physical security from guard personnel to closed-circuit television, to security in computer architecture, to telecommunications and network security, Information Security Management Handbook lives up to its title. An extensive glossary and index round out this massive reference, featuring over three thousand pages of expertise distilled in terms accessible to lay readers and professionals alike. "Password cracking would include cryptographic and brute-force attacks against password files, applying massive amounts of computer power to overwhelm the cryptographic protection of the passwords, typically in a remote or offline mode. Password guessing would include users attempting to guess the passwords to specific accounts, based on analysis and conjecture, and would typically be conducted through the password interface in an online mode. Password disclosure would include users sharing password credentials, or writing down passwords such that they are discoverable by an attacker." An absolute "must-have" for information security professionals, and anyone else responsible for ensuring that trade secrets stay secret!
 too thick March 3, 2008
The book should be published in 3 volumes. It is just too thick, imagine flipping through 3000++ pages. The quality of the paper used is very poor too. Content of the book is fine.
Solid (and heavy) February 21, 2008
I have the Sixth Edition. Yes, it is 3000+ pages and is printed on wafer thin paper. br /br /The content is excellent for security professionals, particularly those at the management level. There are 220+ articles within the 10 (ISC)2 domains on a wide variety of topics. Most of the stuff is higher level but just technical enough for you to have confidence in the concepts presented. It would probably be typical that you'd read an article in here for one of three reasons: background research for an immediate decision that doesn't require detailed technical knowledge; introduction to concepts that will require further in-depth research; or research for a presentation to senior management, in which case you'd have to distill and simplify conceptually (something you're probably already used to). br /br /You will find multiple articles on single topics- some more complete than others, and potentially with a variety of perspectives, so you'll have to make your own calls on what's presented. It's not a "InfoSec Management for Dummies" book that will give you easy answers to your problem or a step-by-step "how to implement an InfoSec program" guide; it's more like an encyclopedia for research that you can use to factor into making your own, independent decisions. For example, there's not a lot of specifics on actual risk assessment techniques, but there are high level articles on the principles. br /br /I wish each of the individual articles were specifically dated so I'd know the time context; seeing a statement like "the position of CISO was virtually unheard of five years ago" or even "80 percent of companies monitor their employees' email" means less without knowing when the article was written.br /br /I could probably find a lot of similar information Googling for it, but Google doesn't seem to be what it once was (or the Internet for that matter... so much for the days of shared research) and my time is too valuable to spend a lot of it culling through blogs, noisy forums, and marketing junk disguised as whitepapers to get this information.br /br /For the record, I have passed the CISSP exam. I did not use this book, nor would I recommend it as a study guide. I bought this particular book because I needed it as a reference for my work. If you mastered this book cover to cover and didn't read anything else, you'd probably do OK on the exam, but there are far more efficient means to getting there.
Excellent Security book January 5, 2007
1 out of 1 found this review helpful
Excellent very extensive security book. A very good reminder for the preparation of the CISSP exam. (is one of the official recommended books).br /br /I passed my CISSP exam, because of this book.br /br /Jako Boonekampbr /CISSP #97956br /The Netherlands
A multiple vision of IT Security March 23, 2006
4 out of 4 found this review helpful
This book is an excellent example of compilation of dozens of good works on IT Security. The quality of articles and the different points of view whereupon are treated turn to it an essential work. It only has a failure: such amount of information has been packed in only a volume that has forced the publisher to reduce both the font and the thickness of the paper to the maximum. Very bad for that no longer we have twenty years and in addition we were used to mark the most interesting paragraphs with a pencil.
|
|
|
| |