Roadmap to Information Security ─ For IT and InfoSec Managers

This book is geared toward helping information security managers by providing concise guidance on assessing and improving an organization's security. It also addresses the needs of IT managers as they step into their first information security role. This book will help information security managers and IT managers respond in ways that meet the immediate needs and expectations of their organizations and to create and maintain a solid information security program.

Features:

The Information Security Manager's Checklist, A handy checklist of issues and considerations drawn from nationally and internationally recognized organizations and experts in the field provides important information to consider when developing or managing an information security program.

Information Security Self-Assessment Checklists, A set of detailed program assessment questions offers users the opportunity to compare a developing information security program against industry security standards. The checklist is used to help evaluate the state of information security in your organization, determine compliance, and, provide guidance on performing continuous improvement.

Technical and Managerial Details Boxes, Interspersed throughout the book, these sections highlight interesting topics and detailed technical issues, giving the reader the option of delving into selected topics more deeply.

Information Security Certification Guidelines, Key topics in the book are mapped to dominant professional certifications, the CISSP (Certified Information Systems Security Professional), SSCP (System Security Certified Professional), and the CISM (Certified Information Security Manager). This resource will facilitate review and study for those seeking certification

Michael E. Whitman, Ph.D., CISM, CISSP, is a Professor of Information Systems in the Department of Computer Science and Information Systems at Kennesaw State University in Kennesaw, Georgia, where he also serves as Director of both the Master's of Science in Information Systems program and the KSU Center for Information Security Education and Awareness.
Herbert J. Mattord, M.B.A., CISM, CISSP, completed over 20 years of IT industry experience as an application developer, database administrator, project manager, and information security practitioner before joining Kennesaw State University in 2002, where he teaches information security courses.