Thursday, February 12, 2009

The Sims 2 or Information Security Governance

The Sims 2: Nightlife: Prima Official Game Guide

Author: Greg Kramer

Make it a night to remember
*Complete catalog of over 125 new Objects and Items
*Details on the new Pleasure and Aspiration
*Create the ultimate social butterfly with details on fun group outings night after night
*Send your Sims to the fanciest restaurant and the dingiest dives in the new downtown neighborhood
*Build the downtown of your dreams
*Become a true creature of the night--live the life of a vampire or a partier
*Be a winner at the dating game with tips for supercharging romantic pursuits



Book review: Introduction à l'Économétrie

Information Security Governance: Design, Implementation, Measurement & Compliance

Author: Timothy P Layton

Organizations rely on digital information today more than ever before. Unfortunately, that information is equally sought after by criminals. New security standards and regulations are being implemented to deal with these threats, but they are very broad and organizations require focused guidance to adapt the guidelines to their specific needs. Fortunately, Information Security: Design, Implementation, Measurement, and Compliance outlines a complete roadmap to successful adaptation and implementation of a security program based on the ISO/IEC 17799:2005 (27002) Code of Practice for Information Security Management. The book first describes a risk assessment model, a detailed risk assessment methodology, and an information security evaluation process. Upon this foundation, the author presents a proposed security baseline for all organizations, an executive summary of the ISO/IEC 17799 standard, and a gap analysis exposing the differences between the recently rescinded version and the newly released version of the standard. Finally, he devotes individual chapters to each of the 11 control areas defined in the standard, covering systematically the 133 controls within the 39 control objectives. Tim Layton's Information Security is a practical tool to help you understand the ISO/IEC 17799 standard and apply its principles within your organization's unique context.



Table of Contents:
Ch. 1Information security risk assessment model (ISRAM)3
Ch. 2Global information security assessment methodology (GISAM)17
Ch. 3Developing an information security evaluation (ISE) process49
Ch. 4A security baseline55
Ch. 5Background of the ISO/IEC 17799 standard71
Ch. 6ISO/IEC 17799:2005 gap analysis77
Ch. 7Security policy117
Ch. 8Organization of information security125
Ch. 9Asset management133
Ch. 10Human resources security139
Ch. 11Physical and environmental security147
Ch. 12Communications and operations management155
Ch. 13Access control173
Ch. 14Information systems acquisition, development, and maintenance185
Ch. 15Information security incident management195
Ch. 16Business continuity management199
Ch. 17Compliance203
App. AISO standards cited in ISO/IEC 17799:2005209

No comments:

Post a Comment