Information Security Risk Analysis

Thomas R. Peltier

• Publisher: Auerbach Publications
• Year: 2010
• ISBN:
  9781439839577
• Edition: 3
• Topic: Business
• Subtopic: Management
• Index: Business

Successful security professionals have had to modify the process of responding to new threats in the high-profile, ultra-connected business environment. But just because a threat exists does not mean that your organization is at risk. This is what risk assessment is all about. Information Security Risk Analysis, Third Edition demonstrates how to id

Table of contents

• Front Cover
• Contents
• Acknowledgments
• About the Author
• Introduction
• Chapter 1 - The Facilitated Risk Analysis and Assessment Process (FRAAP)
• Chapter 2 - Risk Analysis (Project Impact Analysis)
• Chapter 3 - Pre-Screening
• Chapter 4 - Business Impact Analysis
• Chapter 5 - Gap Analysis
• Appendix A: Facilitator Skills
• Appendix B: FRAAP Team Members
• Appendix C: Project Scope Statement
• Appendix D: Laws, Standards, and Regulations
• Appendix E: Frequently Asked Questions about Risk Management
• Appendix F: Risk Analysis versus Risk Assessment
• Appendix G: Sample Threat Checklist
• Appendix H: Sample BIA Questionnaire
• Appendix I: Sample Risk Assessment Management Summary Report
• Appendix J: Project Scope Statement
• Appendix K: Why Risk Assessments Fail
• Appendix L: Gap Analysis Examples
• Appendix M: Control Lists
• Appendix N: Heat Charts
• Back Cover