Information Security Management: Global Best Practices and Implementation Guide: Global Best Practices and Implementation Guide

Author: Sun Qiang
Publisher:
Publish Date: 2004-10-01
Features: The book "Information Security Management: Global Best Practices and Implementation Guide" provides a detailed exploration and research on the connotation, significance, and current issues of information security management, and promptly proposes countermeasures, which are believed to be highly beneficial. Readers of "Information Security Management: Global Best Practices and Implementation Guide" will certainly feel the relentless pace of information security management—security is relative and dynamic, requiring continuous evaluation and improvement. The publication of this book holds significant positive implications for promoting the healthy development of information security management in China. This book is a major specialized work in the field of information security management in China, offering the best practices for various organizations to manage information security risks. It comprehensively elaborates on the entire life cycle of an information security management system from three aspects: standard interpretation, implementation, and case studies. The text thoroughly introduces the origin, development history, and main content of ISO/IEC 17799 (BS7799), a globally recognized information security management standard; it provides an in-depth explanation of methods, steps, and application software for implementing information security management; it also reveals for the first time the experiences and lessons learned from the implementation of BS7799 by Chinese enterprises; and the "BS7799 Implementation Cases" section focuses on introducing four typical cases from the perspectives of clients, consulting companies, and vendors. This book is not only suitable for CEOs, CIOs, IT strategic planning managers, CSOs, government and enterprise management personnel, and IT consultants but also serves as an excellent reference for information system auditors and information security management system auditors. It can also be used as a reference for faculty and students engaged in teaching and research on information security management in higher education institutions.