Skip to main content
Apress
Book cover

Practical Information Security Management

A Complete Guide to Planning and Implementation

  • Book
  • © 2016

Overview

  • Shows readers how to create security-focused business propositions balancing cost, risk and usability

  • Covers broad range of subject matter pertaining to security management, including organizational structures, security architectures, governance frameworks, and operational security

  • Cocers digital forensics and malware analysis

This is a preview of subscription content, log in via an institution to check access.

Access this book

eBook USD 59.99
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book USD 79.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Other ways to access

Licence this eBook for your library

Institutional subscriptions

Table of contents (14 chapters)

Keywords

About this book

Create appropriate, security-focused business propositions that consider the balance between cost, risk, and usability, while starting your journey to become an information security manager. Covering a wealth of information that explains exactly how the industry works today, this book focuses on how you can set up an effective information security practice, hire the right people, and strike the best balance between security controls, costs, and risks.

Practical Information Security Management provides a wealth of practical advice for anyone responsible for information security management in the workplace, focusing on the ‘how’ rather than the ‘what’. Together we’ll cut through the policies, regulations, and standards to expose the real inner workings of what makes a security management program effective, covering the full gamut of subject matter pertaining to security management: organizational structures, security architectures, technical controls, governance frameworks, and operational security.

This book was not written to help you pass your CISSP, CISM, or CISMP or become a PCI-DSS auditor. It won’t help you build an ISO 27001 or COBIT-compliant security management system, and it won’t help you become an ethical hacker or digital forensics investigator – there are many excellent books on the market that cover these subjects in detail. Instead, this is a practical book that offers years of real-world experience in helping you focus on the getting the job done.

 

What You Will Learn

  • Learn the practical aspects of being an effective information security manager

  • Strike the right balance between cost and risk

  • Take security policies and standards and make them work in reality

  • Leverage complex security functions, such as Digital Forensics, Incident Response and Security Architecture

Who This Book Is For<
Anyone who wants to make a difference in offering effective security management for their business. You might already be a security manager seeking insight into areas of the job that you’ve not looked at before, or you might be a techie or risk guy wanting to switch into this challenging new career. Whatever your career goals are, Practical Security Management has something to offer you.



Reviews

“The security professional author provides in about 235 pages a clear and concise textbook-style introduction to the field of information security management. … students and other professionals will find basic information, in one location, in an easily read format. … This work provides an excellent starting point for anyone wanting a rapid comprehensive overview of information security management.” (Computing Reviews, June, 2017)

Authors and Affiliations

  • Burns Beach, Australia

    Tony Campbell

About the author

Tony Campbell has been in the IT industry for over 25 years with the majority of his career providing consultancy services to the UK government in security architecture and security management. Prior to moving to Perth in 2013, Tony was Chief Security Architect on a large UK Ministry of Defence programme and managed a team of enterprise security architects. Since moving to Australia, he has provided strategic security consultancy to a variety of local government agencies and authored ISO27001 security manuals. Tony now works for Kinetic IT, a successful Australian owned and operated IT managed services provider where he has developed IT security strategies for both WA and Victorian clients, and is highly regarded for his insights by customers and colleagues alike. He can be contacted at: tcampbell666@gmail.com.

Bibliographic Information

Publish with us