View Information Security Handbook on Amazon
I wrote the second edition of Information Security Handbook as a practical guide to building and managing an information security program that is aligned with the organization it protects. The book focuses on the decisions security professionals actually have to make, including how to align security with business objectives, understand organizational risk, establish effective governance, build security into architecture and engineering, and operate a program that can continue to mature over time.
This edition expands well beyond the original book. It covers information security fundamentals, threat analysis, risk management, security planning, continuous testing and monitoring, business continuity, incident response, security operations, security architecture, cloud security, Zero Trust architecture, and third party and supply chain security. The emphasis throughout the book is on applying these concepts in real organizations rather than treating security as an isolated technical or compliance function.
The book is written for experienced security professionals who want to strengthen their programs as well as people developing their understanding of information security. The approach is intentionally adaptable. The same principles can be applied within a large enterprise, government organization, or smaller business, with the program scaled to the mission, risk, technology environment, and resources of the organization.
Information Security Handbook, Second Edition: Enhance Your Proficiency in Information Security Program Development
Darren Death
Packt Publishing, 2023
370 pages
ISBN 9781837632701