Eberhard Faber, Wolfgang Behnsen

Secure ICT Service Provisioning for Cloud, Mobile and Beyond (eBook, PDF)

A Workable Architectural Approach Balancing Between Buyers and Providers

• Format: PDF

Produktbeschreibung

This book introduces a reference architecture that enhances the security of services offered in the information and communication technology (ICT) market. It enables customers to compare offerings and to assess risks when using third-party ICT services including cloud computing and mobile services. Service providers are given a comprehensive blueprint for security implementation and maintenance covering service portfolio management, bid phases and realization projects as well as service delivery management. The architecture is completely modular and hierarchical. It contains a security taxonomy organizing all aspects of modern industrialized ICT production. The book also describes a wealth of security measures derived from real-world challenges in ICT production and service management.

Produktdetails

• Verlag: Springer Fachmedien Wiesbaden GmbH
• Erscheinungstermin: 13. Dezember 2012
• Englisch
• ISBN-13: 9783658000691
• Artikelnr.: 38442019

Autorenporträt

Eberhard von Faber has more than 20 years industrial experience in information security. His workspace at T-Systems is Security Strategy and Executive Consulting. He is also professor at Brandenburg University of Applied Science .

Wolfgang Behnsen is Senior Security Manager at T-Systems. He worked in several roles in information security management. He holds several recognized security certificates and is member of diverse associations.

Inhaltsangabe

Security, Assurance and the Division of Labor.- Industrialization Concept, Requirements Treatment and Composition of Services.- Work Areas, Collaboration Model and Hierarchy of Security Standards.- Concept of Double Direction Standards.- Security Taxonomy: Criteria, Goals and Result.- Internal Structureand Usage of the ICT Security Standards.- Rollout Process.

---

Challenges.- Transparency, interaction and standardization.- Dimensions, work areas, hierarchy, collaboration model.- Security taxonomy and its everyday use.- Secured by definition: integration with core business.-Standardization concepts and practice.- Attainment: achieving compliance with standards.- Fulfillment: meeting customer demands.- Flexibility: managing the supplier network.- Maintenance: document management and more.- Transformation: sustainable roll-out.- Implementation: IT production and its protection in practice.- Routine: day-to-day security management using ESARIS.