:

product description page

Building a Practical Information Security Program (Paperback) (Jason Andress & Mark Leary)

Building a Practical Information Security Program (Paperback) (Jason Andress & Mark Leary) - image 1 of 1

about this item

Building a Practical Information Security Program provides users with a strategic view on how to build an information security program that aligns with business objectives. The information provided will enable both executive management and IT managers to not only validate existing security programs, but also build new business-driven security programs. In addition, the subject matter enables aspiring security engineers to forge a career path to successfully managing a security program that not only adds value to, but also reduces the risk to, the business.

The book begins by resolving immediate tactical needs, transforming security needs into strategic goals, ultimately helping users put programs into operation with full lifecycle management. Readers will learn how to translate technical challenges into business requirements, understand when to go big or go home, explore in-depth defense strategies, and review tactics on when to absorb risk.

Author David Guretz has built large-scale enterprise security programs that meet business objectives and succeed. As there is so much noise, marketing, and fear in the industry now that spending and deploying based on generic products and standards is often fruitless, and a costly waste of time and energy, this book shows users how to properly plan and implement an infosec program based on business strategy and results.

  • Provides a roadmap on how to build a security program that will protect companies from intrusion
  • Shows how to focus the security program on its essential mission and move past FUD (fear, uncertainty, and doubt) to provide business value
  • Teaches how to build consensus with an effective business-focused program
  • Presents readers with best practices on how to translate technical challenges into business requirements, understand when to go big or go home, how to explore in-depth defense strategies, and how to know when to absorb risk

Cybersecurity can be a daunting topic for many businesses. With so many sources - including regulations, standards, and frameworks - telling you what to do and what to worry about, it's no wonder that security programs have difficulty providing business value. Building a Practical Information Security Program provides you with a strategic view of how to build an information security program that aligns with business objectives. The information provided will enable both executive management and IT managers to validate existing security programs and build new business-driven security programs. The subject matter also enables aspiring security engineers to forge a career path to successfully managing a security program that adds value to and reduces the risk of the business.

Building a Practical Information Security Program starts with resolving immediate tactical needs, transforming security needs into strategic goals, and ultimately leads you to putting the program into operation with full life-cycle management. You'll learn how to translate technical challenges into business requirements, when to "go big or go home", in-depth defense strategies, and when to absorb the risk.

Author David Guretz has built large-scale enterprise security programs that meet business objectives and succeed. There is so much noise, marketing, and fear in the industry now that spending and deploying based on generic products and standards is often fruitless, and a costly waste of time and energy. This book shows you how to properly plan and implement an infosec program based on business strategy and results.

  • Provides a roadmap for how to build a program to protect your company
  • Shows how to focus the security program on its essential mission and move past FUD (fear, uncertainty, and doubt) to provide business value
  • Teaches how to build consensus with an effective business-focused program
Number of Pages: 448
Genre: Computers + Internet
Sub-Genre: Security / General
Format: Paperback
Publisher: Elsevier Science Ltd
Author: Jason Andress & Mark Leary
Language: English
Street Date: October 14, 2016
TCIN: 16996981
UPC: 9780128020425
Item Number (DPCI): 247-44-1920
$64.99
MSRPReg: $69.95 Save $4.96 (7% off)

guest reviews

Prices, promotions, styles and availability may vary by store & online. See our price match guarantee. See how a store is chosen for you.