000 09794nam a2200841 i 4500
001 5989138
003 IEEE
005 20220712205808.0
006 m o d
007 cr |n|||||||||
008 151221s2006 nju ob 001 eng d
020 _a9780471784340
_qelectronic
020 _a0471784346
020 _z0471736120
_qpaper
020 _z9780471736127
_qprint
024 7 _a10.1109/9780471784340
_2doi
035 _a(CaBNVSL)mat05989138
035 _a(IDAMS)0b000064816249a3
040 _aCaBNVSL
_beng
_erda
_cCaBNVSL
_dCaBNVSL
050 4 _aT58.6
_b.L48 2006eb
100 1 _aLeVeque, Vincent,
_eauthor.
_927763
245 1 0 _aInformation security :
_ba strategic approach /
_cVincent LeVeque.
264 1 _a[Hoboken, New Jersey] :
_bWiley,
_cc2006
264 2 _a[Piscataqay, New Jersey] :
_bIEEE Xplore,
_c[2006]
300 _a1 PDF (1 v.).
336 _atext
_2rdacontent
337 _aelectronic
_2isbdmedia
338 _aonline resource
_2rdacarrier
490 1 _aPractitioners ;
_v11
504 _aIncludes bibliographical references.
505 0 _aList of Figures -- Preface -- 1. Introduction -- Strategy Overview -- Strategy and Information Technology -- Strategy and Information Security -- An Information Security Strategic Planning Methodology -- The Business Environment -- Information Value -- Risk -- The Strategic Planning Process -- The Technology Plan -- The Management Plan -- Theory and Practice -- 2. Developing an Information Security Strategy -- Overview -- An Information Security Strategy Development Methodology -- Strategy Prerequisites -- Research Sources -- Preliminary Development -- Formal Project Introduction -- Fact Finding -- General Background Information -- Documentation Review -- Interviews -- Surveys -- Research Sources -- Analysis Methods -- Strengths, Weaknesses, Opportunities, and Threats -- Business Systems Planning -- Life-Cycle Methods -- Critical Success Factors -- Economic Analysis -- Risk Analysis -- Benchmarks and Best Practices -- Compliance Requirements -- Analysis Focus Areas -- Industry Environment -- Organizational Mission and Goals -- Executive Governance -- Management Systems and Controls -- Information Technology Management -- Information Technology Architecture -- Security Management -- Draft Plan Presentation -- Final Plan Presentation -- Options for Plan Development -- A Plan Outline -- Selling the Strategy -- Plan Maintenance -- The Security Assessment and the Security Strategy -- Strategy Implementation: -- What is a Tactical Plan? -- Converting Strategic goals to Tactical Plans -- Turning Tactical Planning Outcomes into Ongoing Operations -- Key Points -- Plan Outline -- 3. The Technology Strategy -- Thinking About Technology -- Planning Technology Implementation -- Technology Forecasting -- Some Basic Advice -- Technology Life-Cycle Models -- Technology Solution Evaluation -- Role of Analysts -- Technology Strategy Components: -- The Security Strategy Technical Architecture -- Leveraging Existing Vendors -- Legacy Technology -- The Management Dimension -- Overall Technical Design.
505 8 _aThe Logical Technology Architecture -- Specific Technical Components -- Servers -- Network Zones -- External Network Connections -- Desktop Systems -- Applications and DBMS -- Portable Computing Devices -- Telephone Systems -- Control Devices -- Intelligent Peripherals -- Facility Security Systems -- Security Management Systems -- Key Points -- 4. The Management Strategy -- Control Systems -- Control Systems and the Information Security Strategy -- Governance -- Ensuring IT Governance -- IT Governance Models -- Current Issues in Governance -- Control Objectives for Information and Related Technology (CobiT) -- IT Balanced Scorecard -- Governance in Information Security -- End-User Role -- An IT Management Model for Information Security -- Policies, Procedures, and Standards -- Assigning Information Security Responsibilities -- To Whom Should Information Security Report? -- Executive Roles -- Organizational Interfaces -- Information Security Staff Structure -- Staffing and Funding Levels -- Managing Vendors -- Organizational Culture and Legitimacy -- Training and Awareness -- Key Points -- 5. Case Studies -- Case Study 1-Singles Opportunity Services -- Background -- Developing the Strategic Plan -- Information Value Analysis -- Risk Analysis -- Technology Strategy -- Management Strategy -- Implementation -- Case Study 2-Rancho Nachos Mosquito Abatement District -- Background -- Developing the Strategic Plan -- Information Value Analysis -- Risk Analysis -- Technology Strategy -- Management Strategy -- Implementation -- Key Points -- 6. Business and IT Strategy: -- Introduction -- Strategy and Systems of Management -- Business Strategy Models -- Boston Consulting Group Business Matrix -- Michael Porter-Competitive Advantage -- Business Process Reengineering -- The Strategy of No Strategy -- IT Strategy -- Nolan/Gibson Stages of Growth -- Information Engineering -- Rockart's Critical Success Factors -- IBM Business System Planning (BSP) -- So is IT really (3z(Bstrategic(3y(B?.
505 8 _aIT Strategy and Information Security Strategy -- Key Points -- 7. Information Economics -- Concepts of Information Protection -- Information Ownership -- From Ownership to Asset -- Information Economics and Information Security -- Basic Economic Principles -- Why is Information Economics Difficult? -- Information Value-Reducing Uncertainty -- Information Value-Improved Business Processes -- Information Security Investment Economics -- The Economic Cost of Security Failures -- Future Directions in Information Economics -- Information Management Accounting-Return on Investment -- Economic Models and Management Decision Making -- Information Protection or Information Stewardship? -- Key Points -- 8. Risk Analysis -- Compliance Versus Risk Approaches -- The (3z(BClassic(3y(B Risk Analysis Model -- Newer Risk Models -- Process-Oriented Risk Models -- Tree-Based Risk Models -- Organizational Risk Cultures -- Risk Averse, Risk Neutral, and Risk Taking Organizations -- Strategic Versus Tactical Risk Analysis -- When Compliance-based Models are Appropriate -- Risk Mitigation -- Key Points -- Notes and References -- Index.
506 1 _aRestricted to subscribers or individual electronic text purchasers.
520 _aBridging the gap between information security and strategic planningThis publication is a reflection of the author's firsthand experience as an information security consultant, working for an array of clients in the private and public sectors. Readers discover how to work with their organizations to develop and implement a successful information security plan by improving management practices and by establishing information security as an integral part of overall strategic planning.The book starts with an overview of basic concepts in strategic planning, information technology strategy, and information security strategy. A practical guide to defining an information security strategy is then provided, covering the "nuts and bolts" of defining long-term information security goals that effectively protect information resources. Separate chapters covering technology strategy and management strategy clearly demonstrate that both are essential, complementary elements in protecting information.Following this practical introduction to strategy development, subsequent chapters cover the theoretical foundation of an information security strategy, including:. Examination of key enterprise planning models that correspond to different uses of information and different strategies for securing information. Review of information economics, an essential link between information security strategy and business strategy. Role of risk in building an information security strategyTwo separate case studies are developed, helping readers understand how the development and implementation of information security strategies can work within their own organizations.This is essential reading for information security managers, information technology executives, and consultants. By linking information security to general management strategy, the publication is also recommended for nontechnical executives who need to protect the value and security of their organization's information.
530 _aAlso available in print.
538 _aMode of access: World Wide Web
588 _aDescription based on PDF viewed 12/21/2015.
650 0 _aManagement information systems
_xSecurity measures.
_910585
650 0 _aComputer security.
_93970
650 0 _aStrategic planning.
_910051
655 0 _aElectronic books.
_93294
695 _aAvailability
695 _aComputer aided software engineering
695 _aControl systems
695 _aEconomics
695 _aIndexes
695 _aIndustries
695 _aInformation security
695 _aInformation technology
695 _aInterviews
695 _aIntrusion detection
695 _aInvestments
695 _aLaw
695 _aNIST
695 _aOrganizations
695 _aPlanning
695 _aPresses
695 _aProcess control
695 _aProposals
695 _aStandards organizations
695 _aStrategic planning
695 _aTemperature measurement
695 _aTraining
695 _aWeb sites
710 2 _aIEEE Xplore (Online Service),
_edistributor.
_927764
710 2 _aJohn Wiley & Sons,
_epublisher.
_96902
730 0 _aIEEE Xplore (Livres)
_926022
776 0 8 _iPrint version:
_z9780471736127
830 0 _aPractitioners ;
_v11
_927765
856 4 2 _3Abstract with links to resource
_uhttps://ieeexplore.ieee.org/xpl/bkabstractplus.jsp?bkn=5989138
942 _cEBK
999 _c74167
_d74167