How to Cheat at Managing Information Security

by Mark Osborne

Overview

This is the only book that covers all the topics that any budding security manager needs to know! This book is written for managers responsible for IT/Security departments from mall office environments up to enterprise networks.

These individuals do not need to know about every last bit and byte, but they need to have a solid understanding of all major, IT security issues to effectively manage their departments. This book is designed to cover both the basic concepts of security, non – technical principle and practices of security and provides basic information about the technical details of many of the products - real products, not just theory.

Written by a well known Chief Information Security Officer, this book gives the information security manager all the working knowledge needed to: • Design the organization chart of his new security organization • Design and implement policies and strategies • Navigate his way through jargon filled meetings • Understand the design flaws of his E-commerce and DMZ infrastructure


* A clearly defined guide to designing the organization chart of a new security organization and how to implement policies and strategies

* Navigate through jargon filled meetings with this handy aid

* Provides information on understanding the design flaws of E-commerce and DMZ infrastructure

Product Details

ISBN-13:	9781597491105
Publisher:	Elsevier Science
Publication date:	10/27/2006
Series:	How to Cheat
Pages:	352
Product dimensions:	7.00(w) x 9.00(h) x (d)

About the Author

Mark Osborne is currently the CISO at Interoute Communications Limited, owner and operator of Europe’s largest next-generation network. Previous to this he was the Head of the Security Practice at KPMG, where he established KPMG's Security Engineering team. He holds an MBA and computing degree. He also is certified as a CISSP, CISM, CCSP and CCSE. He is generally acknowledged with publicizing many of the security flaws with WAP. He has also authored many zero-day vulnerabilities and several IDS/security tools.

Table of Contents

Chapter 1: Preface and Introduction Chapter 2: The Security Organization Chapter 3: The Information Security Policy Chapter 4: Jargon, principles and concepts Chapter 5: Information Security laws and regulations Chapter 6: Information Security Standards and Audits Chapter 7: Interviews, Bosses and Staff Chapter 8: Infrastructure security Chapter 9: Firewalls Chapter 10: Intruder detection systems – Theory Chapter 11: Intruder detection systems – In Practice Chapter 12: Intruder Prevention and Protection Chapter13: Network penetration testing Chapter14: Application security flaws and application testing