Information Security Risk Analysis - Couverture souple

Peltier, Thomas-R

 
9780849308802: Information Security Risk Analysis

Synopsis

Risk is a cost of doing business. The question is "What are the risks, and what are their costs?" Knowing the vulnerabilities and threats that face your organization's information systems is the first essential step in risk management. Information Security Risk Analysis shows you how to use cost-effective risk analysis techniques to identify and quantify the threats - both accidental and purposeful - your organization faces. The book steps you through the qualitative risk analysis process - using techniques such as PARA (Practical Application of Risk Analysis) and FRAP (Facilitated Risk Analysis Process) to: • Evaluate tangible and intangible risks • Use the qualitative risk analysis process • Identify elements that make up a strong Business Impact Analysis FEATURES • Provides the knowledge and practical application of the method necessary to implement an effective subject analysis process • Allows organizations to "pre-screen" application systems or other subjects to determine if a risk analysis is needed • Uses format qualitative risk analysis methods to determine cost-effective solutions • Shows how to evaluate tangible and intangible risks and conduct risk analysis with confidence • Covers using the qualitative risk analysis process

Les informations fournies dans la section « Synopsis » peuvent faire référence à une autre édition de ce titre.

Présentation de l'éditeur

Risk is a cost of doing business. The question is, "What are the risks, and what are their costs?" Knowing the vulnerabilities and threats that face your organization's information and systems is the first essential step in risk management.

Information Security Risk Analysis shows you how to use cost-effective risk analysis techniques to identify and quantify the threats--both accidental and purposeful--that your organization faces. The book steps you through the qualitative risk analysis process using techniques such as PARA (Practical Application of Risk Analysis) and FRAP (Facilitated Risk Analysis Process) to:

  • Evaluate tangible and intangible risks
  • Use the qualitative risk analysis process
  • Identify elements that make up a strong Business Impact Analysis
  • Conduct risk analysis with confidence

    Management looks to you, its information security professional, to provide a process that allows for the systematic review of risk, threats, hazards, and concerns, and to provide cost-effective measures to lower risk to an acceptable level. You can find books that cover risk analysis for financial, environmental, and even software projects, but you will find none that apply risk analysis to information technology and business continuity planning or deal with issues of loss of systems configuration, passwords, information loss, system integrity, CPU cycles, bandwidth, and more. Information Security Risk Analysis shows you how to determine cost effective solutions for your organization's information technology.
  • Les informations fournies dans la section « A propos du livre » peuvent faire référence à une autre édition de ce titre.

    Autres éditions populaires du même titre