Drawing upon a wealth of experience from academia, industry, and government service, Cyber Security Policy Guidebook details and dissects, in simple language, current organizational cyber security policy issues on a global scale―taking great care to educate readers on the history and current approaches to the security of cyberspace. It includes thorough descriptions―as well as the pros and cons―of a plethora of issues, and documents policy alternatives for the sake of clarity with respect to policy alone. The Guidebook also delves into organizational implementation issues, and equips readers with descriptions of the positive and negative impact of specific policy choices. Inside are detailed chapters that: <ul>
<li>Explain what is meant by cyber security and cyber security policy</li> <li>Discuss the process by which cyber security policy goals are set</li> <li>Educate the reader on decision-making processes related to cyber security</li> <li>Describe a new framework and taxonomy for explaining cyber security policy issues</li> <li>Show how the U.S. government is dealing with cyber security policy issues</li> </ul>
With a glossary that puts cyber security language in layman's terms―and diagrams that help explain complex topics―Cyber Security Policy Guidebook gives students, scholars, and technical decision-makers the necessary knowledge to make informed decisions on cyber security policy.

Cyber Security Policy Guidebook

Computers & Technology

Jennifer L. Bayuk

Jason Healey

Paul Rohmeyer

Marcus Sachs

Jeffrey Schmidt

Joseph Weiß

Networking & Cloud Computing

wiley

Marcus H. Sachs

Joseph B. Weiss

The information security professional has evolved from computer operator to chief information security officer; from controlling punched cards to negotiating strategic plans, defining policies, documenting processes, managing technology, measuring performance, controlling costs, supporting business recovery and demonstrating regulatory compliance. This publication includes a case study and steps to: Compose an information security program Cement a relationship between an information security program and IT governance Design roles and responsibilities to ensure accountability Identify and allocate resources to achieve information security program objectives Determine if an information security program is achieving objectives

Stepping Through the InfoSec Program

CISA

CISM

Isaca

Stepping Through the IS Audit: What to Expect How to Prepare 2nd Edition walks the reader through the full cycle of an IS audit. The early chapters describe how the discipline of auditing came about and why an organization might be subject to, or might solicit, the attention of an IS auditor. The book also discusses the purposes of controls and control models, the development of audit programs and how they relate to the risks addressed by the information systems, as well as how audit management ensures that all relevant risks are considered. Finally, the book delves into the audit process itself. Furthermore, having described what the auditor is trying to achieve and how they will go about it, every chapter in this book has a section addressed to the person being audited. This section describes how to work with the auditor to mutual benefit. While Stepping Through the IS Audit speaks directly to the information technology professionals who are undergoing information systems audits, it will have value to the new IS auditor describing the process as a whole and auditors place in the process.

Stepping Through the IS Audit, 2nd Edition

Business & Money

Accounting

See the best price to sell, buy, or rent books by Jennifer L. Bayuk. BookScouter helps to compare book prices from 25+ online bookstores and 30+ buyback vendors with a single search.

Books by Jennifer L. Bayuk