Information Technology Risk Management in Enterprise Environments: A Review of Industry Practices and a Practical Guide to Risk Management Teams

• Discusses all types of corporate risks and practical means of defending against them.
• Security is currently identified as a critical area of Information Technology management by a majority of government, commercial, and industrial organizations.
• Offers an effective risk management program, which is the most critical function of an information security program.

Content:
Chapter 1 Information Security Risk Management Imperatives and Opportunities (pages 1–32):
Chapter 2 Information Security Risk Management Defined (pages 33–72):
Chapter 3 Information Security Risk Management Standards (pages 73–110):
Chapter 4 A Survey of Available Information Security Risk Management Methods and Tools (pages 111–163):
Chapter 5 Methodologies Examples: Cobit and Octave (pages 164–210):
Chapter 6 Risk Management Issues and Organization Specifics (pages 211–242):
Chapter 7 Assessing Organization and Establishing Risk Management Scope (pages 243–279):
Chapter 8 Identifying Resources and Implementing the Risk Management Team (pages 280–337):
Chapter 9 Identifying Assets and Organization Risk Exposures (pages 338–376):
Chapter 10 Remediation Planning and Compliance Reporting (pages 377–391):