Managing risk and information security: protect to enable

Description

This ApressOpen book describes the changing risk environment and why a fresh approach to information security is needed. Because almost every aspect of an enterprise is now dependent on technology, the focus of IT security must shift from locking down assets to enabling the business while managing and surviving risk. The book discusses business risk from a broader perspective, including privacy and regulatory considerations. It describes the increasing number of threats and vulnerabilities, but also offers strategies for developing solutions. These include discussions of how enterprises can take advantage of new and emerging technologies -- such as social media and the huge proliferation of Internet-enabled devices -- while minimizing risk. 1: Introduction: Protect to Enable 2: Misperception of Risk 3: Security Governance and Creating Strong Internal Partnerships 4: External Partnerships 5: People are the Perimeter 6: Emerging Capabilities and Usage Models 7: Emerging Threats and Vulnerabilities 8: A New Security Model 9: The 21st Century CISO 10. References