Principles of Information Security

Description

Cover Brief Contents Table of Contents Preface Module 1: Introduction to Information Security Introduction To Information Security What Is Security? Components Of An Information System Security And The Organization Information Security: Is It An Art or A ­Science? Module Summary Review Questions Exercises References Module 2: The Need for Information Security Introduction To The Need For Information Security Information Security Threats and Attacks The 12 Categories of Threats Module Summary Review Questions Exercises References Module 3: Information Security Management Introduction To The Management of Information Security Information Security Planning and Governance Information Security Policy, Standards, and Practices Security Education, Training, And Awareness Program Information Security Blueprint, Models, and Frameworks Module Summary Review Questions Exercises References Module 4: Risk Management Introduction To Risk Management The Risk Management Framework The Risk Management Process Risk Treatment/Risk Response Managing Risk Alternative Risk Management ­Methodologies Module Summary Review Questions Exercises References Module 5: Incident Response and Contingency Planning Introduction To Incident Response and Contingency Planning Fundamentals of Contingency Planning Incident Response Digital Forensics Disaster Recovery Business Continuity Crisis Management Testing Contingency Plans Module Summary Review Questions Exercises References Module 6: Legal, Ethical, and Professional Issues in Information Security Introduction To Law and Ethics in Information Security Relevant U.S. Laws International Laws and Legal Bodies Ethics and Information Security Codes of Ethics of Professional ­Organizations Key U.S. Federal Agencies Module Summary Review Questions Exercises References Module 7: Security and Personnel Introduction To Security and Personnel Positioning The Security Function Staffing The Information Security Function Credentials For Information Security ­Professionals Employment Policies and Practices Personnel Control Strategies Module Summary Review Questions Exercises References Module 8: Security Technology: Access Controls, Firewalls, and VPNs Introduction To Access Controls Firewall Technologies Protecting Remote Connections Final Thoughts on Remote Access and Access Controls Module Summary Review Questions Exercises References Module 9: Security Technology: Intrusion Detection and Prevention Systems and Other Security Tools Introduction To Intrusion Detection and Prevention Systems Honeypots, Honeynets, and Padded Cell Systems Scanning and Analysis Tools Module Summary Review Questions Exercises References Module 10: Cryptography Introduction To Cryptography Encryption Methods Cryptographic Algorithms Cryptographic Tools Protocols For Secure Communications Module Summary Review Questions Exercises References Module 11: Implementing Information Security Introduction To Information Security ­Implementation The Systems Development Life Cycle Information Security Project Management Technical Aspects of Implementation Nontechnical Aspects of Implementation Module Summary Review Questions Exercises References Module 12: Information Security Maintenance Introduction To Information Security Maintenance Security Management Maintenance Models The Security Maintenance Model Physical Security Module Summary Review Questions Exercises References Glossary Index