Kohnke / Shoemaker / Sigler The Complete Guide to CyberSecurity Risks and Controls

Erscheinungsjahr 2016
ISBN: 978-1-4987-4057-9
Verlag: CRC Press
Format: PDF
Kopierschutz: Adobe DRM (»Systemvoraussetzungen)

E-Book, Englisch, 342 Seiten

Reihe: Internal Audit and IT Audit

The book presents the concepts of information and communications technology (ICT) audit and control from this model. Readers will learn how to create a verifiable audit-based control structure, which will ensure comprehensive security for systems and data. The book explains how to establish systematic control and reporting procedures within a standard organizational framework, and build auditable trust into the security of ICT operations. This book is based around the belief that security is a strategic governance issue rather than an accounting or a technical concern. Besides presenting the concepts of that approach, the book provide exercises and other learning opportunities.

Autoren/Hrsg.

Kohnke, Anne

Shoemaker, Dan

Sigler, Ken E.

Fachgebiete

• Mathematik | Informatik EDV | Informatik EDV & Informatik Allgemein
• Wirtschaftswissenschaften Betriebswirtschaft Management
• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit

Inhaltsverzeichnis

What Controls Are and Why They Are Important. Governance and Control Frameworks. Information Governance: What It Is, Why It Is Important, How It Works. Risk Management and Prioritization Using a Control Perspective. Control Formulation and Implementation. Control Testing and Operational Assurance. Routine Organizational Auditing and Reporting Using the Controls

Über Autor(innen)

Anne Kohnke, Ph.D., is an Assistant Professor of IT at Lawrence Technological University and teaches courses in both the Information Technology and Organization Development/Change Management disciplines at the bachelor through doctorate levels. Anne started as an Adjunct Professor in 2002 and joined the faculty full-time in 2011. Prior to joining LTU, Anne worked in Industry for 25 years where she focused in information technology and management. Her IT career started in the mid-1980’s on a help desk, and over the years Anne developed technical proficiency as a database administrator, network administrator, and technical business analyst. After a decade, Anne was promoted to management and worked as a project manager, IT Director, and Vice President of IT and Chief Information Security Officer (CISO). Daniel P Shoemaker, Ph.D., is a Senior Research Scientist at the University of Detroit Mercy's (UDM) Center for Cyber Security and Intelligence Studies, the Director of University of Detroit's NSA-CAE program, and Visiting Professor at London Southbank University. UDM's Center includes the Computer Information Systems-Information Assurance Department, as well as the Center of Academic Excellence for National Security Agency. The Center has just completed a two year Department of Defense Contract to develop Software Assurance Curriculum and Courseware. Dan is a full time Professor at University of Detroit Mercy with 25 of those years as Department Chair. As the Co-Chair for the National Workforce Training and Education Initiative, he is one of the authors of the National Software Assurance Common Body of Knowledge (CBK) for the Department of Homeland Security and numerous articles published with his dear friend Nancy Mead at the Software Engineering Institute.