No loopholes – Information Security Implementation Guide

Author: Li Yanzhi
Publisher:
Publishing Time: Not Available
Features: Symantec senior information security expert interprets the threats, challenges, and solutions of enterprise information security! "In today's interconnected world, if a company does not protect its computers, it cannot operate normally. If you are a CEO who has already understood the principles and risks, I recommend you read this book. If your time is money, I can't think of a better investment than this book." — Richard Clarke, former chairman of the U.S. President's Critical Infrastructure Protection Board, former special advisor to the President on cybersecurity Each CEO should protect their company's assets. This book helps CEOs understand these challenges and ask the right questions to implement a more effective strategy for their company. — Steve Bennett, President and CEO of Intuit "Mark Egan and Tim Mather help non-technical management personnel fully understand the security challenges faced by companies today." — Eric Benhamou, Chairman of the Board of Directors of 3Com Corporation, palmOne, and PalmSource, Inc. "This book is like a fire alarm at night for the management of commercial companies, making them realize that computer security is not a technical issue—it is actually a business issue, worthy of the same attention and priority as other key elements within the company." — George Reyes, Chief Financial Officer of Google "This is a must-read for every manager in companies of all sizes." — Howard A. Schmidt, former White House cybersecurity advisor, Chief Security Officer of Microsoft, and Vice President and Chief Information Security Officer of eBay This book provides an overall description of information security concepts to help corporate managers better evaluate their company's performance in handling information security issues. At the same time, it also provides practical methods to assist companies in improving their information security plans. The book is organized according to the steps of establishing an information security plan for a company. Chapter 1 "Information Security Challenges" outlines the information security challenges and why corporate managers should be aware of the potential risks these challenges pose to the company. Chapter 2 "Overview of Information Security" introduces information security and the key elements of an effective information security plan. Chapter 3 "Developing an Information Security Plan" introduces a security assessment framework that can be used to evaluate information security plans and develop a roadmap for improving security plans. The next three chapters mainly evaluate the three components of an information security plan: personnel, processes, and technology, and formulate corresponding improvement plans. Chapter 7 "Information Security Roadmap" summarizes all the analyses and describes how to develop a security roadmap to obtain an improved information security plan suitable for the company. Chapter 8 "Looking to the Future" elaborates on future trends in information security. This chapter looks ahead to new threats and the solutions the information security industry has to address these threats. The last chapter lists the 10 essential elements of an effective information security plan and provides a good summary.