Peltier Complete Guide to CISM Certification

Erscheinungsjahr 2006
ISBN: 978-1-4200-1325-2
Verlag: Taylor & Francis
Format: PDF
Kopierschutz: Adobe DRM (»Systemvoraussetzungen)

E-Book, Englisch, 480 Seiten

The Certified Information Security Manager®(CISM®) certification program was developed by the Information Systems Audit and Controls Association (ISACA®). It has been designed specifically for experienced information security managers and those who have information security management responsibilities. The Complete Guide to CISM® Certification examines five functional areas—security governance, risk management, information security program management, information security management, and response management. Presenting definitions of roles and responsibilities throughout the organization, this practical guide identifies information security risks. It deals with processes and technical solutions that implement the information security governance framework, focuses on the tasks necessary for the information security manager to effectively manage information security within an organization, and provides a description of various techniques the information security manager can use. The book also covers steps and solutions for responding to an incident. At the end of each key area, a quiz is offered on the materials just presented. Also included is a workbook to a thirty-question final exam. Complete Guide to CISM® Certification describes the tasks performed by information security managers and contains the necessary knowledge to manage, design, and oversee an information security program. With definitions and practical examples, this text is ideal for information security managers, IT auditors, and network and system administrators.

Zielgruppe

Information security managers, IT auditors, and network and system administrators seeking CISM^® certification.

Autoren/Hrsg.

Peltier, Thomas R.

Peltier, Justin

Fachgebiete

• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit Kryptographie, Datenverschlüsselung

Inhaltsverzeichnis

Information Security Governance

Functional Area Overview

Introduction

Developing an Information Security Strategy in Support of Business Strategy and Direction

Senior Management Commitment and Support

Definitions of Roles and Responsibilities

Obtaining Senior Management Commitment

Establish Reporting Communications That Support Information

Security Governance Activities

Legal and Regulatory Issues

Establish and Maintain Information Security Policies

Ensure the Development of Procedures and Guidelines

Develop Business Case and Enterprise Value Analysis Support

Summary

Questions

Information Security Risk Management

Functional Area Overview

Introduction

Develop a Systematic and Continuous Risk Management Process

Ensure Risk Identification, Analysis, and Mitigation Activities Are Integrated Into the Life Cycle Process

Apply Risk Identification and Analysis Methods

Define Strategies and Prioritize Options to Mitigate Risks to

Levels Acceptable to the Enterprise

Report Significant Changes in Risk

Knowledge Statements

Summary

Questions

Information Security Program Management

Functional Area Overview

CISM® Mapping

Introduction

The OSI Model

The TCP/IP Model

IP Addressing

Transmission Control Protocol (TCP)

User Datagram Protocol (UDP)

Internet Control Message Protocol (ICMP)

CIA Triad

PPPN

Threats

Controls

Buffer Overflows versus Application Security

Virtual Private Networks (VPNs)

Web Server Security versus Internet Security

Security Testing

Summary

Questions

Information Security Management

Functional Area Overview

Introduction

Information Systems Comply

Ensure the Administrative Procedures for Information Systems Comply with the Enterprise’s Information Security Policy

Ensure Services Outsourced Are Consistent

Measure, Monitor, and Report on the Effectiveness and Efficiency of the Controls and Compliance with Information Security Policies

Ensure That Information Security Is Not Compromised Throughout the Change Management Process

Perform Vulnerability Assessments to Evaluate Effectiveness of Existing Controls

Ensure That Noncompliance Issues and Other Variances are Resolved in a Timely Manner

Information Security Awareness and Education

Summary

Questions

Response Management

Functional Area Overview

CISM Mapping

Introduction

Threat Source Information

Business Continuity Planning and Disaster Recovery Planning

Incident Response

Summary

Questions

Index