Securing an IT Organization through Governance, Risk Management, and Audit

Author:   Ken E. Sigler ,  III Rainey
Publisher:   Taylor & Francis Inc
ISBN:  

9781498737319


Pages:   396
Publication Date:   22 January 2016
Format:   Hardback
Availability:   In Print   Availability explained
This item will be ordered in for you from one of our suppliers. Upon receipt, we will promptly dispatch it out to you. For in store availability, please contact us.

Our Price $145.00 Quantity:  
Add to Cart

Share |

Securing an IT Organization through Governance, Risk Management, and Audit


Add your own review!

Overview

Past events have shed light on the vulnerability of mission-critical computer systems at highly sensitive levels. It has been demonstrated that common hackers can use tools and techniques downloaded from the Internet to attack government and commercial information systems. Although threats may come from mischief makers and pranksters, they are more likely to result from hackers working in concert for profit, hackers working under the protection of nation states, or malicious insiders. Securing an IT Organization through Governance, Risk Management, and Audit introduces two internationally recognized bodies of knowledge: Control Objectives for Information and Related Technology (COBIT 5) from a cybersecurity perspective and the NIST Framework for Improving Critical Infrastructure Cybersecurity (CSF). Emphasizing the processes directly related to governance, risk management, and audit, the book provides details of a cybersecurity framework (CSF), mapping each of the CSF steps and activities to the methods defined in COBIT 5. This method leverages operational risk understanding in a business context, allowing the information and communications technology (ICT) organization to convert high-level enterprise goals into manageable, specific goals rather than unintegrated checklist models. The real value of this methodology is to reduce the knowledge fog that frequently engulfs senior business management, and results in the false conclusion that overseeing security controls for information systems is not a leadership role or responsibility but a technical management task. By carefully reading, implementing, and practicing the techniques and methodologies outlined in this book, you can successfully implement a plan that increases security and lowers risk for you and your organization.

Full Product Details

Author:   Ken E. Sigler ,  III Rainey
Publisher:   Taylor & Francis Inc
Imprint:   Auerbach Publishers Inc.
Dimensions:   Width: 15.60cm , Height: 2.50cm , Length: 23.40cm
Weight:   0.703kg
ISBN:  

9781498737319


ISBN 10:   1498737315
Pages:   396
Publication Date:   22 January 2016
Audience:   Professional and scholarly ,  College/higher education ,  Professional & Vocational ,  Tertiary & Higher Education
Format:   Hardback
Publisher's Status:   Active
Availability:   In Print   Availability explained
This item will be ordered in for you from one of our suppliers. Upon receipt, we will promptly dispatch it out to you. For in store availability, please contact us.

Table of Contents

Cybersecurity Risk Management. Introduction to the Framework for Improving Critical Infrastructure. Identify Function. Protect Function. Detect Function. Respond Function. Recover Function. The COBIT Framework. Decomposition of Framework. Framework Structure’s Generic Domains. Decomposition of COBIT 5. COBIT Management Guidelines. COBIT Management Dashboard. What COBIT Sets Out to Accomplish. Internal Audits. Tying It All Together. References.

Reviews

Author Information

Ken Sigler is a faculty member of the Computer Information Systems (CIS) program at the Auburn Hills Michigan campus of Oakland Community College and the chair of the Campus Senate. His primary research is in the area of software management, software assurance, and cybersecurity. He has authored several books on the topic of cybersecurity ICT management and developed the college’s CIS program option Information Technologies for Homeland Security, which has a recognized relationship with the Committee on National Security Systems. Sigler serves as the liaison for the college as one of three founding members of the International Cybersecurity Education Coalition (ICSEC), which is now the Midwest chapter for CISSE. James L. Rainey, III, DMIT, is an IT specialist with the U.S. government where he works on technical project documentation within the SDLC. Dr. Rainey holds an MS degree in computer and information systems and did a tour with the Department of Defense where he earned a citation for his work. Dr. Rainey has also worked as a UNIX system administrator, SAP basis administrator, and enterprise and infrastructure architect. Additionally, he worked at Comerica Bank’s Data Center in Auburn Hills, Michigan, as a developer and taught at the University of Detroit Mercy’s Computer and Information Systems Department for 10 years as an adjunct.

Tab Content 6

Author Website:  

Customer Reviews

Recent Reviews

No review item found!

Add your own review!

Countries Available

All regions
Latest Reading Guide

wl

Shopping Cart
Your cart is empty
Shopping cart
Mailing List