Jack Freund, Jack Jones

Measuring and Managing Information Risk (eBook, ePUB)

A FAIR Approach

• Format: ePub

Produktbeschreibung

Using the factor analysis of information risk (FAIR) methodology developed over ten years and adopted by corporations worldwide, Measuring and Managing Information Risk provides a proven and credible framework for understanding, measuring, and analyzing information risk of any size or complexity. Intended for organizations that need to either build a risk management program from the ground up or strengthen an existing one, this book provides a unique and fresh perspective on how to do a basic quantitative risk analysis. Covering such key areas as risk theory, risk calculation, scenario modeling, and communicating risk within the organization, Measuring and Managing Information Risk helps managers make better business decisions by understanding their organizational risk.

• Uses factor analysis of information risk (FAIR) as a methodology for measuring and managing risk in any organization.
• Carefully balances theory with practical applicability and relevant stories of successful implementation.
• Includes examples from a wide variety of businesses and situations presented in an accessible writing style.

---

Dieser Download kann aus rechtlichen Gründen nur mit Rechnungsadresse in A, B, BG, CY, CZ, D, DK, EW, E, FIN, F, GR, HR, H, IRL, I, LT, L, LR, M, NL, PL, P, R, S, SLO, SK ausgeliefert werden.

Produktdetails

• Verlag: Elsevier Science & Techn.
• Seitenzahl: 408
• Erscheinungstermin: 23. August 2014
• Englisch
• ISBN-13: 9780127999326
• Artikelnr.: 41659380

Autorenporträt

Dr. Jack Freund is an expert in IT risk management specializing in analyzing and communicating complex IT risk scenarios in plain language to business executives. Jack has been conducting quantitative information risk modeling since 2007. He currently leads a team of risk analysts at TIAA-CREF. Jack has over 15 years in IT and technology consulting for organizations such as Nationwide Insurance, CVS/Caremark, Lucent Technologies, Sony Ericsson, AEP, Wendy's International, and The State of Ohio.

He holds a BS in CIS, master's in telecommunication and project management, a PhD in information systems, and the CISSP, CISA, CISM, CRISC, CIPP, and PMP certifications. Jack is a visiting professor at DeVry University and a senior member of the ISSA, IEEE, and ACM. Jack chairs a CRISC subcommittee for ISACA and has participated as a member of the Open Group's risk analyst certification committee. Jack's writings have appeared in the ISSA Journal, Bell Labs Technical Journal, Columbus CEO magazine, and he currently writes a risk column for @ISACA. You can follow all Jack's work and writings at riskdr.com.

Inhaltsangabe

Chapter 1: Introduction

Chapter 2: Basic Risk Concepts

Chapter 3: The FAIR Risk Ontology

Chapter 4: FAIR Terminology

Chapter 5: Measurement

Chapter 6: Analysis Process

Chapter 7: Interpreting Results

Chapter 8: Risk Analysis Examples

Chapter 9: Thinking about Risk Scenarios Using FAIR

Chapter 10: Common Mistakes

Chapter 11: Controls

Chapter 12: Risk Management

Chapter 13: Information Security Metrics

Chapter 14: Implementing Risk Management

Rezensionen

"...informative and insightful-and surprisingly engaging. Using examples, anecdotes, and metaphors, the writers keep this educational work from becoming difficult... Professionals new to thorough information risk analysis or using more simplified approaches will find this book extremely useful." --Security Management