Securing an IT Organization through Governance, Risk Management, and Audit

by Ken E. Sigler, III Rainey

Overview

This book introduces two internationally recognized bodies of knowledge: COBIT 5 from a cybersecurity perspective and the NIST Framework for Improving Critical Infrastructure Cybersecurity (CSF). Emphasizing the processes directly related to governance, risk management, and audit, the book maps the CSF steps and activities to the methods defined in COBIT 5, extending the CSF objectives with practical and measurable activities that leverage operational risk understanding in a business context. This allows the ICT organization to convert high-level enterprise goals into manageable, specific goals rather than unintegrated checklist models.

Product Details

ISBN-13:	9781040070956
Publisher:	CRC Press
Publication date:	01/05/2016
Series:	Security, Audit and Leadership Series
Sold by:	Barnes & Noble
Format:	eBook
Pages:	396
File size:	1 MB

About the Author

Ken Sigler is a faculty member of the Computer Information Systems (CIS) program at the Auburn Hills Michigan campus of Oakland Community College and the chair of the Campus Senate. His primary research is in the area of software management, software assurance, and cybersecurity. He has authored several books on the topic of cybersecurity ICT management and developed the college's CIS program option Information Technologies for Homeland Security, which has a recognized relationship with the Committee on National Security Systems. Sigler serves as the liaison for the college as one of three founding members of the International Cybersecurity Education Coalition (ICSEC), which is now the Midwest chapter for CISSE.

James L. Rainey, III, DMIT, is an IT specialist with the U.S. government where he works on technical project documentation within the SDLC. Dr. Rainey holds an MS degree in computer and information systems and did a tour with the Department of Defense where he earned a citation for his work. Dr. Rainey has also worked as a UNIX system administrator, SAP basis administrator, and enterprise and infrastructure architect. Additionally, he worked at Comerica Bank's Data Center in Auburn Hills, Michigan, as a developer and taught at the University of Detroit Mercy's Computer and Information Systems Department for 10 years as an adjunct.

Table of Contents

Cybersecurity Risk Management. Introduction to the Framework for Improving Critical Infrastructure. Identify Function. Protect Function. Detect Function. Respond Function. Recover Function. The COBIT Framework. Decomposition of Framework. Framework Structure's Generic Domains. Decomposition of COBIT 5. COBIT Management Guidelines. COBIT Management Dashboard. What COBIT Sets Out to Accomplish. Internal Audits. Tying It All Together. References.