سیاست‌ها، رویه‌ها و استانداردهای امنیت اطلاعات: راهنماهایی برای مدیریت مؤثر امنیت اطلاعات

by Definition, Information Security Exists To Protect Your Organization's Valuable Information Resources. But Too Often Information Security Efforts Are Viewed As Thwarting Business Objectives. An Effective Information Security Program Preserves Your Information Assets And Helps You Meet Business Objectives. Information Security Policies, Procedures, And Standards: Guidelines For Effective Information Security Management Provides The Tools You Need To Select, Develop, And Apply A Security Program That Will Be Seen Not As A Nuisance But As A Means To Meeting Your Organization's Goals. divided Into Three Major Sections, The Book Covers: Writing Policies, Writing Procedures, And Writing Standards. Each Section Begins With A Definition Of Terminology And Concepts And A Presentation Of Document Structures. You Can Apply Each Section Separately As Needed, Or You Can Use The Entire Text As A Whole To Form A Comprehensive Set Of Documents. The Book Contains Checklists, Sample Policies, Procedures, Standards, Guidelines, And A Synopsis Of British Standard 7799 And Iso 17799. peltier Provides You With The Tools You Need To Develop Policies, Procedures, And Standards. He Demonstrates The Importance Of A Clear, Concise, And Well-written Security Program. His Examination Of Recommended Industry Best Practices Illustrates How They Can Be Customized To Fit Any Organization's Needs. Information Security Policies, Procedures, And Standards: Guidelines For Effective Information Security Management Helps You Create And Implement Information Security Procedures That Will Improve Every Aspect Of Your Enterprise's Activities. booknews walks Through The Key Structure Elements Of A Written Information Protection Policy, And Reviews Some Typical Policy Contents. The Guide Illustrates How To Develop The Related Standards, Procedures, And Guidelines For Implementing The Policy. Each Chapter Provides Advice On The Structural Mechanics Of The Various Documents As Well As An Example Of Each Form. The Classification Of Information Is Also Covered. The Appendices Contain A Policy Baseline Checklist, Sample Corporate Policies, And Sample Security Policies. Annotation C. Book News, Inc., Portland, Or (booknews.com) This guide provides the tools you need to develop policies, procedures and standards. It demonstrates the importance of a clear, concise and well-written security program. The examination of recommended industry best practices illustrates how they can be customized to fit any organization's needs. By definition, information security exists to protect your organization's valuable information resources. But too often information security efforts are viewed as thwarting business objectives. An effective information security program preserves your information assets and helps you meet business objectives. Information Security Policies, Procedures, and Standards: Guidelines for Effective Information Security Management provides the tools you need to select, develop, and apply a security program that will be seen not as a nuisance but as a means to meeting your organization's goals. Divided into three major sections, the book covers: writing policies, writing procedures, and writing standards. Each section begins with a definition of terminology and concepts and a presentation of document structures. You can apply each section separately as needed, or you can use the entire text as a whole to form a comprehensive set of documents. The book contains checklists, sample policies, procedures, standards, guidelines, and a synopsis of British Standard 7799 and ISO 17799. Peltier provides you with the tools you need to develop policies, procedures, and standards. He demonstrates the importance of a clear, concise, and well-written security program. His examination of recommended industry best practices illustrates how they can be customized to fit any organization's needs. Information Security Policies, Procedures, and Standards: Guidelines for Effective Information Security Management helps you create and implement information security procedures that will improve every aspect of your enterprise's activities An effective information security program preserves your information assets and helps you meet business objectives. This book provides the tools you need to select, develop, and apply a security program that can be seen not as a nuisance but as a means to meeting your organization's goals. The purpose of information protection is to protect the valuable resources of an organization, such as information, hardware, and software.