Information Security Handbook

View Information Security Handbook on Amazon

I wrote Information Security Handbook as a practical guide to building and operating an information security program that fits the organization it is intended to protect. The book starts with the fundamentals of information security, then moves into threat modeling, risk management, security planning, continuous testing and monitoring, incident response, security operations, architecture, cloud security, and practical security implementation.

The focus throughout the book is on applying security inside a real organization. Security decisions have to reflect the systems, data, business functions, threats, and risks being managed. The book walks through how to develop an information security framework around those needs and how to integrate security into the broader technology lifecycle rather than treating it as a separate activity.

It is written for security professionals, IT practitioners, managers, and people building their understanding of information security and risk management. The goal is to give the reader enough practical context to build, assess, and improve an information security program within their own organization.

Information Security Handbook: Develop a Threat Model and Incident Response Strategy to Build a Strong Information Security Framework
Darren Death
Packt Publishing, 2017
330 pages

Table of Contents

1. Information and Data Security Fundamentals
2. Defining the Threat Landscape
3. Preparing for Information and Data Security
4. Information Security Risk Management
5. Developing Your Information and Data Security Plan
6. Continuous Testing and Monitoring
7. Business Continuity/Disaster Recovery Planning
8. Incident Response Planning
9. Developing a Security Operations Center
10. Developing an Information Security Architecture Program
11. Cloud Security Consideration
12. Information and Data Security Best Practices

View Information Security Handbook on Amazon