IT security risk control management : an audit preparation plan / Raymond Pompon.
By: Pompon, Raymond.
Material type:
TextPublisher: [Berkeley, CA] : Apress c2016Description: xxxi, 311 pages : illustrations ; 26 cm.ISBN: 9781484221396 (pbk.); 1484221397 (pbk.).Other title: I T security risk control management.Subject(s): Information technology -- School of Pure and Applied Sciences -- School of Pure and Applied Sciences | Computer security. -- School of Pure and Applied Sciences| Item type | Current location | Call number | Status | Date due | Barcode | Item holds |
|---|---|---|---|---|---|---|
Long Loan Book
|
Kirinyaga University Library | QA76.9 .P66 2016 (Browse shelf) | Available | KYU/2021/8576 |
Close shelf browser
|
|
|
|
|
|
|
||
| QA76.9 .M85 2007 Computer architecture and organization : | QA 76.9 .M87 2015 Murach's MySQL / | QA 76.9 .O64 2004 IT security : | QA76.9 .P66 2016 IT security risk control management : | QA 76.9 .R36 2009 Informations, assurance, security and privacy | QA 76.9 .R36 2009 Informations, assurance, security and privacy | QA76.9 .S44 2006 System Analysis and Design Methods |
Includes index.
Part I: Getting a Handle on Things -- Chapter 1: Why Audit. Chapter 2: Assume Breach. Chapter 3: Risk Analysis: Assets and Impacts. Chapter 4: Risk Analysis: Natural Threats. Chapter 5: Risk Analysis: Adversarial Risk. Part II: Wrangling the Organization -- Chapter 6: Scope. Chapter 7: Governance. Chapter 8: Talking to the Suits. Chapter 9: Talking to the Techs. Chapter 10: Talking to the Users. Part III: Managing Risk with Controls -- Chapter 11: Policy. Chapter 12: Control Design. Chapter 13: Administrative Controls. Chapter 14: Vulnerability Management. Chapter 15: People Controls. Chapter 16: Logical Access Control. Chapter 17: Network Security Controls. Chapter 18: More Technical Controls. Chapter 19: Physical Security Controls. Part IV: Being Audited.-Chapter 20: Response Controls. Chapter 21: Starting the Audit. Chapter 22: Internal Audit. Chapter 23: Third Party Security. Chapter 24: Post Audit Improvement.