Information Security Governance

IT Security governance is becoming an increasingly important issue for all levels of a company. IT systems are continuously exposed to a wide range of threats, which can result in huge risks that threaten to compromise the confidentiality, integrity, and availability of information. IT Security governance is becoming an increasingly important issue for all levels of a company. IT systems are continuously exposed to a wide range of threats, which can result in huge risks that threaten to compromise the confidentiality, integrity, and availability of information. This book will be of use to those studying information security, as well as those in industry. Key Features: The book provides a point of entry into the subject with an easy-to-understand model of Information Security Governance Book addresses information security from the governance side, with special emphasis on the accountability of top management Ideal for the professional market as it discusses some international best practices for IT Security Governance in detail IT Security governance is becoming an increasingly important issue for all levels of a company. IT systems are continuously exposed to a wide range of threats, which can result in huge risks that threaten to compromise the confidentiality, integrity, and availability of information. This book will be of use to those studying information security, as well as those in industry.

The increased dependency of organizations (companies, agencies, associations etc.) on information technology has entailed the growing importance of Information Security, making it a critical success factor. At the same time the complexity of Information Security has increased significantly over the last years and it has furthermore been subject to legal specifications like SOX and EUROSOX. In order to handle the raised demands of Information Security and conform to legal requirements, it is essential for organizations to move away from pure IT security (firewall, anti-virus, etc.) and introduce a solid Information Security Governance, which also emphasizes the responsibility of the board and top management. Central part of an Information Security Governance is the Information Security Management System (ISMS). This book describes the motivation and the necessary steps for the implementation of such an ISMS from a Governance point of view in order to contribute optimally to the success of an organization. Furthermore this book also highlights the significance of certification in the area of Information Security and presents possible achievements (ISO 27001, BSI IT-Grundschutz).