Information Security Risk Analysis

Authored by renowned security expert and certification instructor, Thomas Peltier, this authoritative reference provides readers with the knowledge and the skill-set needed to achieve a highly effective risk analysis assessment in a matter of days. Peltier demonstrates how to identify threats and then determine if those threats pose a real risk. Supplemented with online access to user-friendly checklists, forms, questionnaires, sample assessments, and other documents, this work is truly a one-stop, how-to resource for industry and academia professionals.

(Bookdata)

Bli först med att recensera och betygsätt boken Information Security Risk Analysis - du kan vinna 200 kr varje månad i tävlingen "Månadens recension".

Thomas R. Peltier Associates, LLC, Wyandotte, Michigan, USA

(Bookdata)

INTRODUCTION Frequently Asked Questions Conclusion RISK MANAGEMENT Overview Risk Management as Part of the Business Process Employee Roles and Responsibilities Information Security Life Cycle Risk Analysis Process Risk Assessment Cost-Benefit Analysis Risk Mitigation Final Thoughts RISK ASSESSMENT PROCESS Introduction Risk Assessment Process Information Is an Asset Risk Assessment Methodology Final Thoughts QUANTITATIVE VERSUS QUALITATIVE RISK ASSESSMENT Introduction Quantitative and Qualitative Pros and Cons Qualitative Risk Assessment Basics Qualitative Risk Assessment Using Tables The 30-Minute Risk Assessment Conclusion OTHER FORMS OF QUALITATIVE RISK ASSESSMENT Introduction Hazard Impact Analysis Questionnaires Single Time Loss Algorithm Conclusion FACILITATED RISK ANALYSIS AND ASSESSMENT PROCESS (FRAAP) Introduction FRAAP Overview Why The FRAAP Was Created Introducing the FRAAP to Your Organization Conclusion VARIATIONS ON THE FRAAP Overview Infrastructure FRAAP Conclusion MAPPING CONTROLS Controls Overview Creating Your Controls List Control List Examples BUSINESS IMPACT ANALYSIS (BIA) Overview Creating a BIA Process CONCLUSION Appendix A: Sample Risk Assessment Management Summary Report Appendix B: Terms and Definitions Appendix C: Bibliography

(Bookdata)