Building an Information Security Awareness Program

TRAMA

These attributes render Building an Information Security Awareness Program an immensely valuable reference in the arsenal of the IS professional.

NOTE EDITORE

In his latest book, a pre-eminent information security pundit confessed that he was wrong about the solutions to the problem of information security. It's not technology that's the solution, but the human factor-people. But even infosec policies and procedures are insufficient if employees don't know about them, or why they're important, or what can happen to them if they ignore them. The key, of course, is continuous awareness of the problems and the solutions. Building an Information Security Awareness Program addresses these concerns. A reference and self-study guide, it goes step-by-step through the methodology for developing, distributing, and monitoring an information security awareness program. It includes detailed instructions on determining what media to use and where to locate it, and it describes how to efficiently use outside sources to optimize the output of a small staff. The author stresses the importance of security and the entire organizations' role and responsibility in protecting it. He presents the material in a fashion that makes it easy for nontechnical staff members to grasp the concepts. These attributes render Building an Information Security Awareness Program an immensely valuable reference in the arsenal of the IS professional.

SOMMARIO

GETTING STARTEDReviewing the Provisions the Company Now Has in PlaceLearning the Players-Where the Power ResidesLearning the Corporate Culture-What Can Work Here, What CannotObtaining Management Buyoff-How to Present the CaseFinding Communications Vehicles Currently in PlaceESTABLISHING A BASELINEReview All Company Polices, Procedures, Standards, Guidelines That Even Remotely Address Information Security IssuesIdentifying What Can Be UpdatedIdentify Documentation NeededPrepare DocumentationPrepare FormsObtain Management Support for Documents-The Seal of ApprovalDistributionCOMMUNICATIONSThe Media Available Through the CompanyNew Technology (Video Taping, Streaming Video, Etc.)Class or Presentation DesignInclusion of HR Based CommunicationsLeveraging ResourcesLocating Additional ResourcesPlacing Your Shots-Getting the Most Bang for Your BuckEVALUATIONDemonstrating the Effectiveness of Your ProgramRefreshing Staff Knowledge and AgreementsUse Statistics-Sparingly but PointedlyGetting Third Party InputLeveraging Internal AuditKeeping Up with the Joneses-What Is Happening in the IndustryUpdating the Program to Address Changing Needs.

ALTRE INFORMAZIONI

• Condizione: Nuovo
• ISBN: 9780849301162
• Dimensioni: 10 x 7 in Ø 1.30 lb
• Formato: Brossura
• Illustration Notes: 50 b/w images and 5 tables
• Pagine Arabe: 272