Managing Risk and Information Security: Protect to Enable (Second Edition)

Examine the evolving enterprise security landscape and discover how to manage and survive risk. While based primarily on the author's experience and insights at major companies where he has served as CISO and CSPO, the book also includes many examples from other well-known companies and provide...

Full description

Saved in:
Bibliographic Details
Main Author: Malcolm W. Harkins (auth)
Format: Book Chapter
Published: Apress 2016
Online Access:Get Fullteks
DOAB: description of the publication
Tags: Add Tag
No Tags, Be the first to tag this record!
LEADER 02911naaaa2200253uu 4500
001 doab_20_500_12854_52669
005 20210211
020 |a /doi.org/10.1007/978-1-4842-1455-8 
020 |a 9781484214558 
020 |a 9781484214565 
024 7 |a https://doi.org/10.1007/978-1-4842-1455-8  |c doi 
041 0 |a English 
042 |a dc 
100 1 |a Malcolm W. Harkins  |4 auth 
245 1 0 |a Managing Risk and Information Security: Protect to Enable (Second Edition) 
260 |b Apress  |c 2016 
300 |a 1 electronic resource (187 p.) 
506 0 |a Open Access  |2 star  |f Unrestricted online access 
520 |a Examine the evolving enterprise security landscape and discover how to manage and survive risk. While based primarily on the author's experience and insights at major companies where he has served as CISO and CSPO, the book also includes many examples from other well-known companies and provides guidance for a management-level audience. Managing Risk and Information Security provides thought leadership in the increasingly important area of enterprise information risk and security. It describes the changing risk environment and why a fresh approach to information security is needed. Because almost every aspect of an enterprise is now dependent on technology not only for internal operations but increasing as a part of product or service creation, the focus of IT security must shift from locking down assets to enabling the business while managing and surviving risk. This edition discusses business risk from a broader perspective, including privacy and regulatory considerations. It describes the increasing number of threats and vulnerabilities and offers strategies for developing solutions. These include discussions of how enterprises can take advantage of new and emerging technologies-such as social media and the huge proliferation of Internet-enabled devices-while minimizing risk. What You'll Learn Review how people perceive risk and the effects it has on information security See why different perceptions of risk within an organization matters Understand and reconcile these differing risk views Gain insights into how to safely enable the use of new technologies Who This Book Is For The primary audience is CIOs and other IT leaders, CISOs and other information security leaders, IT auditors, and other leaders of corporate governance and risk functions. The secondary audience is CEOs, board members, privacy professionals, and less senior-level information security and risk professionals. 
536 |a Intel 
540 |a Creative Commons  |f https://creativecommons.org/licenses/by/4.0/  |2 cc  |4 https://creativecommons.org/licenses/by/4.0/ 
546 |a English 
856 4 0 |a www.oapen.org  |u https://link.springer.com/book/10.1007/978-1-4842-1455-8  |7 0  |z Get Fullteks 
856 4 0 |a www.oapen.org  |u https://directory.doabooks.org/handle/20.500.12854/52669  |7 0  |z DOAB: description of the publication