Information Security Management (Global Best Practices and Implementation Guide)

Author: Sun Qiang Chen Wei
Publisher:
Publishing Time: Not available
Features: The book "Information Security Management: Global Best Practices and Implementation Guide" provides a detailed exploration and research on the connotation, significance, and current issues of information security management, and promptly proposes countermeasures, which is believed to be highly beneficial to everyone. Readers of "Information Security Management: Global Best Practices and Implementation Guide" will certainly feel the relentless pace of information security management, recognizing that security is relative and dynamic, requiring continuous evaluation and improvement. The publication of this book holds significant positive implications for promoting the healthy development of information security management in China. This book is an important specialized work in the field of information security management in our country, providing the best practices for various organizations to manage information security risks. It comprehensively elaborates on the entire life cycle of an information security management system from three aspects: standard interpretation, implementation, and case studies. The book thoroughly introduces the origin, development history, and main content of ISO/IEC 17799 (BS7799), a globally recognized information security management standard; it provides an in-depth explanation of methods, steps, and application software for implementing information security management; it also reveals for the first time the experiences and lessons learned from the implementation of BS7799 by Chinese enterprises; additionally, the "BS7799 Implementation Cases" focuses on introducing four typical cases from the perspectives of customers, consulting companies, and vendors. This book is not only suitable for CEOs, CIOs, IT strategic planning supervisors, CSOs, government and enterprise management personnel, and IT consultants but also serves as an excellent reference for information system auditors and information security management system auditors. It can also be used as a reference for faculty and students engaged in teaching and research on information security management in higher education institutions.