Security program and policies : principles and practices
This is a complete, up-to-date, hands-on guide to creating effective information security policies and procedures. It introduces essential security policy concepts and their rationale, thoroughly covers information security regulations and frameworks, and presents best-practice policies specific to industry sectors, including finance, healthcare and small business. Ideal for classroom use, it covers all facets of Security Education, Training & Awareness (SETA), illuminates key concepts through real-life examples. Sari Greene is an information security practitioner, author, and entrepreneur. She founded Sage Data Security in 2002 and has amassed thousands of hours in the field working with a spectrum of technical, operational, and management personnel as well as board of directors, regulators, and service providers Publisher's note
Print Book, English, 2014
Pearson IT Certification, Indianapolis, Ind., 2014
Problems and exercises
xvi, 618 p
9780789751676, 0789751674
897789345
Understanding policy
Policy elements and style
Information security framework
Governance and risk management
Asset management
Human resources security
Physical and environmental security
Communications and operations security
Access control management
Information systems acquisition, development, and maintenance
Information security incident management
Business continuity management
Regulatory compliance for financial institutions
Regulatory compliance for the healthcare sector
PCI compliance for merchants