内容

目次

Part I: Risk Assessment 1. Computer Crime Techniques 2. Laws, Standards, and Frameworks 3. Risk Assessment Process Part II: Protective Controls 4. Physical Security 5. Authentication and Authorization 6. Biometric Identification 7. Password Management 8. Server Security and Management 9. Firewall Security and Management 10. Encryption Techniques 11. Malware Threats and Mitigation Strategies 12. Application Security and Controls 13. Security Awareness Part III: Detective Controls 14. Computer Security Logs and Audit Trails 15. Intrusion Detection and Prevention Systems 16. Forensic Techniques 17. Information Security Assessments 18. Management and Organizational Controls 19. Systems Development and Maintenance Controls Part IV: Security Planning and Management 20. Security Planning Process 21. IT Governance and Management 22. Mobile Device Management and Security 23. Cloud Computing and IT Outsourcing 24. Information Security Metrics Part V: Response Management 25. Incident Response Plan 26. Backup and Offsite Storage 27. Business Continuity Planning and Management 28. Continuity of Operations Planning Part VI: Compliance Management 29. External Audit 30. Internal IT Audit Part VII: Working Materials Appendix A. Risk Assessment Worksheets Appendix B. Sample Policies Appendix C. Exhibits Appendix D. Glossary Index