The CISM Prep Guide

RONALD L. KRUTZ, Ph.D., P.E., CISSP, is a Senior Information Security Consultant with the Information Assurance Solutions (IAS) operation of BAE Enterprise Systems. He is also the lead for all Capability Maturity Model (CMM) engagements for IAS, and developed IAS's HIPAA-CMM assessment methodology. Krutz is the coauthor of the CISSP(r) Prep Guide, The CISSP(r) Prep Guide, Gold Edition, and the Security+ Prep Guide (Wiley). RUSSELL DEAN VINES, CISSP, is President and founder of The RDV Group Inc., a New York City-based security consulting services firm. He is the author of Wireless Security Essentials and coauthor of the CISSP(r) Prep Guide, The CISSP(r) Prep Guide, Gold Edition, and the Security+ Prep Guide (Wiley).

About the Authors. Introduction. Chapter 1. Information Security Governance. Chapter 2. Risk Management. Chapter 3. Information Security Program Management. Chapter 4. Information Security Management. Chapter 5. Response Management. Appendix A. Glossary of Terms and Acronyms. Appendix B. CISM Area Tasks and Knowledge Statements. Appendix C. Answers to Sample Questions.