Complete Guide to Security and Privacy Metrics - Debra S. Herrmann

Complete Guide to Security and Privacy Metrics

Measuring Regulatory Compliance, Operational Resilience, and ROI
Buch | Hardcover
846 Seiten
2007
Auerbach (Verlag)
978-0-8493-5402-1 (ISBN)
159,95 inkl. MwSt
Defines more than 900 metrics measuring compliance with legislation, resiliency of security controls, and return on investment. This book explains what needs to be measured, why and how to measure it, and how to tie security and privacy metrics to business goals and objectives.
While it has become increasingly apparent that individuals and organizations need a security metrics program, it has been exceedingly difficult to define exactly what that means in a given situation. There are hundreds of metrics to choose from and an organization’s mission, industry, and size will affect the nature and scope of the task as well as the metrics and combinations of metrics appropriate to accomplish it. Finding the correct formula for a specific scenario calls for a clear concise guide with which to navigate this sea of information.

Complete Guide to Security and Privacy Metrics: Measuring Regulatory Compliance, Operational Resilience, and ROI defines more than 900 ready to use metrics that measure compliance, resiliency, and return on investment. The author explains what needs to be measured, why and how to measure it, and how to tie security and privacy metrics to business goals and objectives. The book addresses measuring compliance with current legislation, regulations, and standards in the US, EC, and Canada including Sarbanes-Oxley, HIPAA, and the Data Protection Act-UK. The metrics covered are scaled by information sensitivity, asset criticality, and risk, and aligned to correspond with different lateral and hierarchical functions within an organization. They are flexible in terms of measurement boundaries and can be implemented individually or in combination to assess a single security control, system, network, region, or the entire enterprise at any point in the security engineering lifecycle. The text includes numerous examples and sample reports to illustrate these concepts and stresses a complete assessment by evaluating the interaction and interdependence between physical, personnel, IT, and operational security controls.

Bringing a wealth of complex information into comprehensible focus, this book is ideal for corporate officers, security managers, internal and independent auditors, and system developers and integrators.

U.S. Nuclear Regulatory Commission, Washington, D.C., USA

Introduction, The Whats and Whys of Metrics, Measuring Compliance with Security and Privacy Regulations and Standards, Measuring Resilience of Physical, Personnel, IT, and Operational Security Controls, Measuring Return on Investment (ROI) in Physical, Personnel, IT, and Operational Security Controls

Erscheint lt. Verlag 22.1.2007
Zusatzinfo 56 Tables, black and white; 28 Illustrations, black and white
Verlagsort London
Sprache englisch
Maße 178 x 254 mm
Gewicht 1620 g
Themenwelt Informatik Netzwerke Sicherheit / Firewall
Informatik Theorie / Studium Kryptologie
Recht / Steuern Privatrecht / Bürgerliches Recht IT-Recht
Technik Bauwesen
ISBN-10 0-8493-5402-1 / 0849354021
ISBN-13 978-0-8493-5402-1 / 9780849354021
Zustand Neuware
Haben Sie eine Frage zum Produkt?
Mehr entdecken
aus dem Bereich

von Chaos Computer Club

Buch | Softcover (2024)
KATAPULT Verlag
28,00