Information Technology Security Planning and Management

The book is designed to introduce fundamental concepts of information systems security by providing you with an understanding of the importance of information security and several techniques of planning and managing information systems security methods, frameworks and ethics. The book provides details of key information security concepts including major issues in attacks, risks, threats, assets and protection strategies. This book also covers information security risk management, scoring systems, enterprise security architecture, network security infrastructure, security policies and procedures organization structure and management levels, information security planning and business continuity, cyber security economy, information security program development and management, computer emergency incident response plans and teams. In this book, the relevant information security models and frameworks are also discussed. Major frameworks covered include COBIT, ISO/IEC 27000 Series, NIST SP 800 Series, SAMM, SANS 20, CIS 20, HITRUST, Cisco Security Control Framework (SCF) Model and other relevant inhouse developed security frameworks.