02095cam a22003257i 4500 4695 4695 19253598 OSt 20250925114232.0 160830s2016 caua 001 0 eng d 2016952621 9781484221396 (pbk.) 1484221397 (pbk.) (OCoLC)ocn954429355 KYU eng KYUL KYUL BDX DLC lccopycat QA76.9.A25 P656 2016 Pompon, Raymond. IT security risk control management : an audit preparation plan / Raymond Pompon. I T security risk control management [Berkeley, CA] : Apress c2016. xxxi, 311 pages : illustrations ; 26 cm Includes index. Part I: Getting a Handle on Things -- Chapter 1: Why Audit. Chapter 2: Assume Breach. Chapter 3: Risk Analysis: Assets and Impacts. Chapter 4: Risk Analysis: Natural Threats. Chapter 5: Risk Analysis: Adversarial Risk. Part II: Wrangling the Organization -- Chapter 6: Scope. Chapter 7: Governance. Chapter 8: Talking to the Suits. Chapter 9: Talking to the Techs. Chapter 10: Talking to the Users. Part III: Managing Risk with Controls -- Chapter 11: Policy. Chapter 12: Control Design. Chapter 13: Administrative Controls. Chapter 14: Vulnerability Management. Chapter 15: People Controls. Chapter 16: Logical Access Control. Chapter 17: Network Security Controls. Chapter 18: More Technical Controls. Chapter 19: Physical Security Controls. Part IV: Being Audited.-Chapter 20: Response Controls. Chapter 21: Starting the Audit. Chapter 22: Internal Audit. Chapter 23: Third Party Security. Chapter 24: Post Audit Improvement. Information technology School of Pure and Applied Sciences School of Pure and Applied Sciences Computer Science Computer security. Computer Science School of Pure and Applied Sciences 7 cbc copycat 2 epcn 20 y-gencatlg lcc LLB 0 0 lcc 0 0 KyUCL KyUCL 2021-05-10 1 QA76.9 .P66 2016 KYU/2021/8576 2026-03-31 2023-01-07 2021-05-10 LLB