Information Technology Risk Management in Enterprise Environments: A Review of Industry Practices and a Practical Guide to Risk Management Teams

Description

Discusses all types of corporate risks and practical means of defending against them. Security is currently identified as a critical area of Information Technology management by a majority of government, commercial, and industrial organizations. Offers an effective risk management program, which is the most critical function of an information security program. Content: Chapter 1 Information Security Risk Management Imperatives and Opportunities (pages 1–32): Chapter 2 Information Security Risk Management Defined (pages 33–72): Chapter 3 Information Security Risk Management Standards (pages 73–110): Chapter 4 A Survey of Available Information Security Risk Management Methods and Tools (pages 111–163): Chapter 5 Methodologies Examples: Cobit and Octave (pages 164–210): Chapter 6 Risk Management Issues and Organization Specifics (pages 211–242): Chapter 7 Assessing Organization and Establishing Risk Management Scope (pages 243–279): Chapter 8 Identifying Resources and Implementing the Risk Management Team (pages 280–337): Chapter 9 Identifying Assets and Organization Risk Exposures (pages 338–376): Chapter 10 Remediation Planning and Compliance Reporting (pages 377–391):