Bazavan, Ioana V.; Lim, Ian
While information security is an ever-present challenge for all types of organizations today, most focus on providing security without addressing the necessities of staff, time, or budget in a practical manner.
Information Security Cost Management offers a pragmatic approach to implementing information security, taking budgetary and real-world constraints into consideration. By providing frameworks, step-by-step processes, and project management breakdowns, this book demonstrates how to design the best security strategy with the resources you have available.
Organized into five sections, the book-
Focuses on setting the right road map so that you can be most effective in your information security implementations
Discusses cost-effective staffing, the single biggest expense to the security organization
Presents practical ways to build and manage the documentation that details strategy, provides resources for operating annual audits, and illustrates how to advertise accomplishments to senior management effectively
Identifies high-risk areas, focusing limited resources on the most imminent and severe threats
Describes how to manage the key access controls when faced with manual user management, how to automate user management tasks in a cost effective manner, and how to deal with security breaches
Demonstrating strategies to maximize a limited security budget without compromising the quality of risk management initiatives, Information Security Cost Management helps you save your organization time and money. It provides the tools required to implement policies, processes, and training that are crucial to the success of a company's security.
Security Strategy-Thinking Practically. Security Organization Design-Cost-Effective Staffing. Security Management- Effectively Enforcing Your Strategy. Security Technologies-Establishing a Solid Foundation. Security Operations-Maintaining Security Efficiently
Written in an accessible, informal style, Information Security Cost Management demonstrates how to strategically maximize a limited security budget without compromising the quality of risk management initiatives. Organized into management components, each chapter highlights common pitfalls in security initiatives and recommends cost saving methods to achieve intended results. It presents processes that show how to identify the most critical components of a system's security, staff a security operation, prioritize spending, manage internal and external audits, assess costs for identity and access management, maximize the use of vendors, and evaluate the costs of outsourcing.
Inhaltsverzeichnis
Security Strategy-Thinking Practically. Security Organization Design-Cost-Effective Staffing. Security Management- Effectively Enforcing Your Strategy. Security Technologies-Establishing a Solid Foundation. Security Operations-Maintaining Security Efficiently
Klappentext
Written in an accessible, informal style, Information Security Cost Management demonstrates how to strategically maximize a limited security budget without compromising the quality of risk management initiatives. Organized into management components, each chapter highlights common pitfalls in security initiatives and recommends cost saving methods to achieve intended results. It presents processes that show how to identify the most critical components of a system's security, staff a security operation, prioritize spending, manage internal and external audits, assess costs for identity and access management, maximize the use of vendors, and evaluate the costs of outsourcing.
