Information Assurance Handbook ─ Effective Computer Security and Risk Management Strategies

A clear, actionable blueprint for securing the vital information and IT services of global organizations of all sizes

Information Assurance Handbook provides an overall strategy for safeguarding your organization’s critical data. The book presents a body of knowledge and outlines the steps necessary for senior management to effectively work with risk and learn to strategically, systematically, and economically plan for security challenges.

You’ll learn how to implement technology, practices, and processes to mitigate and manage risk over time and also how to prevent, detect, contain, and recover from security breaches. The professional practices outlined are essential knowledge for effective security and risk management.

• Reveals how to predict known--and yet unknown--security risks
• Invaluable best practices technically vetted by a panel of global security leaders
• Outlines privacy law and critical standards and practices required to make strategic choices about compliance, risk acceptance, and performance
• Explains the critical differences between assets, threats, vulnerabilities, and controls to achieve effective decision-making for risk management throughout all levels of the organization

Corey Schou, Ph.D., CSSLP, (Pocatello, ID) is a fellow and vice chairperson of (ISC)2, a professor of informatics at Idaho State University, and the director of the Informatics Research Institute and the National Information Assurance Training and Education Center.

Steven Hernandez, MBA, CISSP, (Fairfax, VA) is OIG Chief Information Security Officer at the U.S. Department of Health and Human Services and affiliate faculty at Idaho State University. He sits on the ACT-IAC Big Data Committee for security, privacy, and data management.