Information Security Engineering and Management

Author: China Information Security Product Testing and Certification Center
Publisher:
Publish Date: 2003-09-01
Features: This book is primarily aimed at the training of "Certified Information Security Professionals" (CISPs). It is structured around the knowledge framework that a CISP should possess. The book mainly introduces the fundamental concepts of risk assessment, security policies, security engineering, and information security management. It provides detailed descriptions of security management for the environment, personnel, software, application systems, operations, and documentation, as well as emergency response and disaster recovery, and the national information security organizational structure, among other content related to information security management. Through studying this book, professionals in the information security and related industries can gain an understanding of the concepts of risk, security policies, and security engineering, and clarify the content that information security management should encompass. This book is suitable as a training textbook for information security professional training courses and can also be used as a reference for technicians engaged in related work and readers interested in information security.