Management of information security [electronic resource] / Michael E Whitman; Herbert J Mattford.

Chapter 1: Introduction to the management of information security Chapter 2: Compliance: law and ethics Chapter 3: Governance and strategic planning for security Chapter 4: Information security policy Chapter 5: Developing the security program Chapter 6: Risk management : assessing risk Chapter 7: Risk management : treating risk Chapter 8: Security management models Chapter 9: Security management practices Chapter 10: Planning for contingencies Chapter 11: Security maintenance Chapter 12: Protection mechanisms.

Prepares you to become an information security management practitioner able to secure systems and networks in a world where continuously emerging threats, ever-present attacks and the success of criminals illustrate the weaknesses in current information technologies. You'll develop both the information security skills and practical experience that organizations are looking for as they strive to ensure more secure computing environments. The text focuses on key executive and managerial aspects of information security. It also integrates coverage of CISSP and CISM throughout to effectively prepare you for certification. Reflecting the most recent developments in the field, it includes the latest information on NIST, ISO and security governance as well as emerging concerns like Ransomware, Cloud Computing and the Internet of Things -- Provided by the publisher.