Overview

Full Product Details

9781780175720

Table of Contents

Reviews

Anyone wishing to become an InfoSec risk management practitioner MUST purchase this book. David has produced an extremely useful and readable book for those entering this discipline and indeed those practitioners wishing to have an invaluable reference resource sitting on their bookshelf. I highly recommended it.--John Hughes Director, SecID Consultants Information is the 21st century's new gold and protecting such a volatile asset is a tremendous challenge. This book provides many keys to understanding important concepts and possible approaches for mitigating the associated risks.--Lionel Dupre Networks and Information Security Expert at ENISA This book is a well written and illustrated throughout, covering the subject area to a sufficient level of detail for both novices and experienced practitioners requiring a refresher. A very practical and complete guide to managing risks within an organisation.--Mehmet Hurer

Information risk management is an integral part of every business and the author presents its lifecycle in an easy-to-follow and well-organised format with real-life examples, tools and templates. I highly recommend the book also as a valuable reference for legislation, standards, methodologies and frameworks for risk professionals to follow. -- Sema Yuce, Director at Truth ISC Technology and Security Consultancy Ltd. This book is essential reading for any risk management practitioner. The author's many years of practical experience in the subject shine through, it is clearly written and easy to follow. The book sets out the best approach when identifying and evaluating risk and the factors to consider when treating it in a pragmatic way. The examples give context and aid understanding and the appendices are comprehensive and a go-to source of useful information on risk. Highly recommended, this will be on my bookshelf. -- David Alexander, Information Security Group, Royal Holloway, University of London

Information risk management is an integral part of every business and the author presents its lifecycle in an easy-to-follow and well-organised format with real-life examples, tools and templates. I highly recommend the book also as a valuable reference for legislation, standards, methodologies and frameworks for risk professionals to follow. -- Sema Yuce CISM CRISC CISA, Director at Truth ISC Technology and Security Consultancy Ltd. This book is essential reading for any risk management practitioner. The author's many years of practical experience in the subject shine through, it is clearly written and easy to follow. The book sets out the best approach when identifying and evaluating risk and the factors to consider when treating it in a pragmatic way. The examples give context and aid understanding and the appendices are comprehensive and a go-to source of useful information on risk. Highly recommended, this will be on my bookshelf. -- David Alexander, Information Security Group, Royal Holloway, University of London This book should be mandatory reading within any business to understand the scale and scope of the landscape within which their information security and assurance professionals need to operate. -- Andrea Simmons PhD FBCS CITP CISM CISSP MA CIPP/E CIPM

Author Information

David Sutton's career in IT spans more than 50 years and includes voice and data networking, information security and critical information infrastructure protection. He has been a member of the BCS Professional Certification Information Security Panel since 2005 and has delivered lectures on information risk management and business continuity at the Royal Holloway University of London. He is the author of BCS book 'Cyber Security' and co-author of 'Information Security Management Principles' and 'Data Governance.'

Tab Content 6

Customer Reviews

Recent Reviews

Countries Available