Management of Information Security
Principles of Information Security with MindTap
Higher Education
Author(s): Michael E. Whitman | Herbert J. Mattord
ISBN: 9781337675680
6th Edition
Copyright: 2019
Binding: eBook
MANAGEMENT OF INFORMATION SECURITY, Sixth Edition gives readers an overview of information security and assurance using both domestic and international standards, all from a management perspective. Beginning with the foundational and technical components of information security, this edition then focuses on access control models, information security governance, and information security program assessment and metrics.The Fourth Edition is revised and updated to reflect changes in the field, including the ISO 27000 series, so as to prepare readers to succeed in the workplace.
1. Introduction to Management of Information Security.
2. Compliance: Law and Ethics
3. Governance and Strategic Planning for Security
4. Information Security Policy.
5. Developing the Security Program.
6. Risk Management: Assessing Risk
7. Risk Management: Treating Risk
8. Security Management Models
9. Security Management Practices
10. Planning for Contingencies
11. Security Maintenance
12. Protection Mechanisms
Michael E. Whitman - Ph.D., CISM, CISSP
Michael Whitman, Ph.D., CISM, CISSP is a Professor of Information Security at Kennesaw State University, Kennesaw, Georgia, where he is also the Executive Director of the KSU/Coles College of Business Center for Information Security Education.
Herbert J. Mattord - Ph.D., CISM, CISSP
Herbert Mattord, Ph.D., CISM, CISSP completed 24 years of IT industry experience as an application developer, database administrator, project manager, and information security practitioner before joining the faculty at Kennesaw State University, where he is Assistant Chair of the Department of Information Systems and Associate Professor of Information Security and Assurance program.