Business Continuity and Disaster Recovery for InfoSec Managers
by James F. Ransome, PhD, CISM, CISSP, John Rittinghouse, PhD, CISM
Business Continuity and Disaster Recovery for InfoSec Managers
- Front Cover
- Business Continuity and Disaster Recovery for InfoSec Managers
- Copyright Page
- Contents (1/2)
- Contents (2/2)
- Foreword
- Introduction
- Introduction: Business Security 101
- The State of the BCP and Network Disaster Recovery Industry: Where Are We and Why?
- Threats to Personal Privacy
- Fraud and Theft
- Internet Fraud
- Employee Sabotage
- Infrastructure Attacks
- Malicious Hackers
- Malicious Coders
- Industrial Espionage
- Social Engineering
- Educate Staff and Security Personnel (1/2)
- Educate Staff and Security Personnel (2/2)
- Managing Access
- Physical Access
- Access Control
- Access Control Models (1/3)
- Access Control Models (2/3)
- Access Control Models (3/3)
- Password Management (2/2)
- Security Management Practices
- Chapter Summary
- Endnotes
- Acknowledgments
- Chapter 1. Contingency and Continuity Planning
- Chapter 2. Assessing Risk
- 2.1 Determining Threats
- 2.2 Risk Management
- 2.3 The Risk Manager
- 2.4 Risk Assessment
- 2.5 Emergency Incident Assessment (1/7)
- 2.5 Emergency Incident Assessment (2/7)
- 2.5 Emergency Incident Assessment (3/7)
- 2.5 Emergency Incident Assessment (4/7)
- 2.5 Emergency Incident Assessment (5/7)
- 2.5 Emergency Incident Assessment (6/7)
- 2.5 Emergency Incident Assessment (7/7)
- 2.6 Business Risk Assessment
- 2.7 Business Impact Analysis (BIA) (1/4)
- 2.7 Business Impact Analysis (BIA) (2/4)
- 2.7 Business Impact Analysis (BIA) (3/4)
- 2.7 Business Impact Analysis (BIA) (4/4)
- 2.8 Information Security, IT and Communications (1/2)
- 2.8 Information Security, IT and Communications (2/2)
- 2.9 Chapter Summary
- 2.10 Endnotes
- Chapter 3. Mitigation Strategies
- 3.1 Preventative Measures for Information Security Managers (1/2)
- 3.1 Preventative Measures for Information Security Managers (2/2)
- 3.2 Information Security Preventative Controls
- 3.3 Other Preventative Controls
- 3.4 Summary of Existing Emergency Procedures
- 3.5 Key Personnel for Handling Emergency Procedures
- 3.6 External Emergency Services
- 3.7 Premises Issues
- 3.8 Chapter Summary
- 3.9 Endnotes
- Chapter 4. Preparing for a Possible Emergency
- Chapter 5. Disaster Recovery Phase
- Chapter 6. Business Recovery Phase
- Chapter 7. Testing, Auditing, and Training
- 7.1 Testing the Business Recovery Process
- 7.2 Security Testing
- 7.3 The Open Source Security Testing Methodology Manual
- 7.4 Monitoring and Updating
- 7.5 Hardening Systems
- 7.6 System Patches
- 7.7 Auditing Fundamentals
- 7.8 Auditor's Role in Developing Security Policies
- 7.9 Auditing Standards and Groups
- 7.10 Audit Oversight Committee
- 7.11 Auditing and Assessment Strategies
- 7.12 Basic Audit Methods and Tools
- 7.13 General Information Systems (IS) Audit Process
- 7.14 Perimeter Audits
- 7.15 Using Nmap
- 7.16 Mapping the Network with Nmap
- 7.17 Analyzing Nmap Scan Results
- 7.18 Penetration Testing Using Nessus
- 7.19 Training Staff for the Business Recovery Process
- 7.20 Chapter Summary
- 7.21 Endnotes
- Chapter 8. Maintaining a Business Continuity Plan
- BCP/DR Glossary (2/5)
- BCP/DR Glossary (3/5)
- BCP/DR Glossary (4/5)
- BCP/DR Glossary (5/5)
- General References (2/2)
- A. Sample Recovery Checklist
- C Organizational Security Management
- Index (1/4)
- Index (2/4)
- Index (3/4)
Business Continuity and
Disaster Recovery for
InfoSec Managers
John W. Rittinghouse, Ph.D., CISM
James F. Ransome, Ph.D., CISM, CISSP
AMSTERDAM • BOSTON • HEIDELBERG • LONDON
NEW YORK • OXFORD • PARIS • SAN DIEGO
SAN FRANCISCO • SINGAPORE • SYDNEY • TOKYO
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.