|
|
||
![]() |
||
| HELP | ||
|
$73.95
New Hardcover
Ships in 1 to 3 days
available for shipping or prepaid pickup only
Assessing and Managing Security Risk in It Systemsby Laurie Kelly
Synopses & ReviewsPublisher Comments:Assessing and Managing Security Risk in IT Systems: A Structured Methodology builds upon the original McCumber Cube model to offer proven processes that do not change, even as technology evolves. This book enables you to assess the security attributes of any information system and implement vastly improved security environments. Part I delivers an overview of information systems security, providing historical perspectives and explaining how to determine the value of information. This section offers the basic underpinnings of information security and concludes with an overview of the risk management process. Part II describes the McCumber Cube, providing the original paper from 1991 and detailing ways to accurately map information flow in computer and telecom systems. It also explains how to apply the methodology to individual system components and subsystems. Part III serves as a resource for analysts and security practitioners who want access to more detailed information on technical vulnerabilities and risk assessment analytics. McCumber details how information extracted from this resource can be applied to his assessment processes. Book News Annotation:The information security implementation and assessment methodology
presented in this work is applicable to any system and is not
affected by the rapid technological change that characterizes
information technology, argues the author. He introduces the basics
of information systems security before describing his "McCumber Cube"
methodology, first introduced in 1991. The methodology rests on the
relationships between the tracking of information as it moves through
states of transmission, storage, and processing; the charting of
information security attributes of confidentiality, integrity, and
availability; and judging the information security risks of
technology, procedures, and human interventions.
Annotation ©2004 Book News, Inc., Portland, OR (booknews.com) Synopsis:This book begins with an overview of information systems security, offering the basic underpinnings of information security and concluding with an analysis of risk management. Part II describes the McCumber Cube, providing the original paper from 1991 and detailing ways to accurately map information flow in computer and telecom systems. It also explains how to apply the methodology to individual system components and subsystems. Part III serves as a resource for analysts and security practitioners who want access to more detailed information on technical vulnerabilities and risk assessment analytics. McCumber details how information extracted from this resource can be applied to his assessment processes. What Our Readers Are SayingBe the first to add a comment for a chance to win!Product Details
Related Aisles | |||||||||
|
| ||||||||||
|
|
||||||||||