Enterprise Information Security and Privacy

by C. Warren Axelrod, Jennifer L. Bayuk (Editor), Daniel Schutzer (Editor)

Overview

Here's a unique and practical book that addresses the rapidly growing problem of information security, privacy, and secrecy threats and vulnerabilities. This authoritative resource helps you understand what really needs to be done to protect sensitive data and systems and how to comply with the burgeoning roster of data protection laws and regulations. The book examines the effectiveness and weaknesses of current approaches and guides you towards practical methods and doable processes that can bring about real improvement in the overall security environment. You gain insight into the latest security and privacy trends, learn how to determine and mitigate risks, and discover the specific dangers and responses regarding the most critical sectors of a modern economy.

Product Details

ISBN-13:	9781596931909
Publisher:	Artech House, Incorporated
Publication date:	02/28/2009
Edition description:	New Edition
Pages:	231
Product dimensions:	6.20(w) x 9.20(h) x 0.70(d)

About the Author

C. Warren Axelrod is a director of global information security at a major financial firm responsible for security policies, standards, and awareness. He has been a senior information technology manager on Wall Street for more than 25 years, has contributed to numerous conferences and seminars, and has published extensively. Dr. Axelrod is the author of Outsourcing Information Security (Artech House, 2004). He holds a Ph.D. in managerial economics from Cornell University, and a B.Sc. in electrical engineering and an M.A. in economics and statistics from Glasgow University. He is certified as a CISSP and CISM. Jennifer Bayuk is the Chief Information Security Officer for Bear Stearns & Co., Inc. Ms. Bayuk has been a manager of information systems audit, a big 4 security consultant and auditor, and security software engineer at AT&T Bell Laboratories. She is a well-published author and holds masters degrees in computer science and philosophy.

Table of Contents

Forward. Preface. Acknowledgements. Part 1: Trends - Privacy Roles and Responsibilities. Data Protection. IT Operational Pressures on Information Security. Information Classification. Human Factors. Part 2: Risks - Making the Case for Replacing Risk-Based Security. The Economics of Loss. Legal and Regulatory Obligations. Telecommunications. Part 3: Experience - Financial Services. Energy. Transportation Security. Academia. About the Authors.