Information Security Governance

IT Security governance is becoming an increasingly important issue for all levels of a company. IT systems are continuously exposed to a wide range of threats, which can result in huge risks that threaten to compromise the confidentiality, integrity, and availability of information. This book will be of use to those studying information security, as well as those in industry. Key Features: * The book provides a point of entry into the subject with an easy-to-understand model of Information Security Governance * Book addresses information security from the governance side, with special emphasis on the accountability of top management * Ideal for the professional market as it discusses some international best practices for IT Security Governance in detail Front Matter....Pages 1-12 An Introduction to Corporate Governance....Pages 1-7 Information Technology Governance....Pages 1-7 Information Security and Information Security Governance....Pages 1-11 Introducing the Information Security Governance Model....Pages 1-10 The Use of Best Practice Standards and Guidelines in Information Security Governance....Pages 1-21 The Direct Part of the Model – An Information Security Policy Architecture....Pages 1-12 The Control Part of the Model – An Information Security Compliance Management Environment....Pages 1-13 IT Risk Management....Pages 1-14 Organizing the Information Security Function....Pages 1-11 Information Security Education, Training and Awareness....Pages 1-14 A Methodology for Establishing an Information Security Governance Environment....Pages 1-4 Back Matter....Pages 1-4 IT Security governance is becoming an increasingly important issue for all levels of a company. IT systems are continuously exposed to a wide range of threats, which can result in huge risks that threaten to compromise the confidentiality, integrity, and availability of information. This book will be of use to those studying information security, as well as those in industry. The book provides a point of entry into the subject with an easy-to-understand model of Information Security Governance. It addresses information security from the governance side, with special emphasis on the accountability of top management. It is ideal for the professional market as it discusses some international best practices for IT Security Governance in detail