Landoll, Douglas J.
Information security policies, procedures, and standards : a practitioner's reference Douglas J. Landoll - Boca Raton : CRC Press, Taylor & Francis Group, c2016. - xiv, 240 p. : ill. ; 25 cm.
Includes bibliographical references and index.
IntroductionNo Short CutsTop-Down SecurityCurrent State of Information Security Policy SetsEffectiveness of Information Security Policy SetsExercisesInformation Security Policy BasicsInformation Security Policy TypesExercisesInformation Security Policy FrameworkInformation Security Policy Sets without FrameworksInformation Security Policy Sets with FrameworksCommon Information SPFsTailoring Information SPFsDeriving a Policy Set from a FrameworkExercisesInformation Security Policy DetailsFront MatterPolicy StatementsSpecific Information Security PoliciesPolicy Document ExamplesExercisesInformation Security Procedures and StandardsLess Formal Language and StructureVarious Purposes of the Standard and GuidelineInformation Security ProceduresExercisesInformation Security Policy ProjectsScoping the ProjectInformation Security Policy Project RolesInformation Security Policy Project PhasesInformation Security Policy Revision ProjectInformation Security Policy Project ApplicationExercisesAppendicesExample Policies (FISMA Framework)Example Departmental PolicyTailoring Guide.
Information Security Policies, Procedures, and Standards: A Practitioner's Reference gives you a blueprint on how to develop effective information security policies and procedures. It uses standards such as NIST 800-53, ISO 27001, and COBIT, and regulations such as HIPAA and PCI DSS as the foundation for the content. Highlighting key terminology, policy development concepts and methods, and suggested document structures, it includes examples, checklists, sample policies and procedures, guidelines, and a synopsis of the applicable standards.
9781482245899
2015040188
Business--Data processing--Security measures
Data protection
Computer security
HF5548.37 / .L3577 2016
658.4/78
Information security policies, procedures, and standards : a practitioner's reference Douglas J. Landoll - Boca Raton : CRC Press, Taylor & Francis Group, c2016. - xiv, 240 p. : ill. ; 25 cm.
Includes bibliographical references and index.
IntroductionNo Short CutsTop-Down SecurityCurrent State of Information Security Policy SetsEffectiveness of Information Security Policy SetsExercisesInformation Security Policy BasicsInformation Security Policy TypesExercisesInformation Security Policy FrameworkInformation Security Policy Sets without FrameworksInformation Security Policy Sets with FrameworksCommon Information SPFsTailoring Information SPFsDeriving a Policy Set from a FrameworkExercisesInformation Security Policy DetailsFront MatterPolicy StatementsSpecific Information Security PoliciesPolicy Document ExamplesExercisesInformation Security Procedures and StandardsLess Formal Language and StructureVarious Purposes of the Standard and GuidelineInformation Security ProceduresExercisesInformation Security Policy ProjectsScoping the ProjectInformation Security Policy Project RolesInformation Security Policy Project PhasesInformation Security Policy Revision ProjectInformation Security Policy Project ApplicationExercisesAppendicesExample Policies (FISMA Framework)Example Departmental PolicyTailoring Guide.
Information Security Policies, Procedures, and Standards: A Practitioner's Reference gives you a blueprint on how to develop effective information security policies and procedures. It uses standards such as NIST 800-53, ISO 27001, and COBIT, and regulations such as HIPAA and PCI DSS as the foundation for the content. Highlighting key terminology, policy development concepts and methods, and suggested document structures, it includes examples, checklists, sample policies and procedures, guidelines, and a synopsis of the applicable standards.
9781482245899
2015040188
Business--Data processing--Security measures
Data protection
Computer security
HF5548.37 / .L3577 2016
658.4/78