Email RIS file
Bookmark
Report an Issue

IT Security Controls [electronic resource] : A Guide to Corporate Standards and Frameworks / by Virgilio Viegas, Oben Kuyucu

Author
Viegas, Virgilio
Published
Berkeley, CA : Apress : Imprint: Apress, 2022.
Edition
1st ed. 2022.
Physical Description
XXI, 354 p. 43 illus., 3 illus. in color. online resource
Additional Creators
Kuyucu, Oben and SpringerLink (Online service)
Access Online

Availability

I Want It
I Want It

Finding items...

Contents
Chapter 1. The Cybersecurity Challenge -- Chapter 2. International Security Standards -- Chapter 3. Information Security Frameworks -- Chapter 4. IT Security Technical Controls -- Chapter 5. Corporate Information Security Processes and Services -- Chapter 6. People -- Chapter 7. Security Metrics -- Chapter 8. Case Studies -- Chapter 9. Security Testing and Attack Simulation Tools Appendix 1: IT Security Technical Controls, Processes, and Services Matrix Appendix 2: Information Security Certifications Appendix 3: Knowledge of Secure Acquisitions Appendix 4: Resource Library.
Summary
Use this reference for IT security practitioners to get an overview of the major standards and frameworks, and a proposed architecture to meet them. The book identifies and describes the necessary controls and processes that must be implemented in order to secure your organization's infrastructure. The book proposes a comprehensive approach to the implementation of IT security controls with an easily understandable graphic implementation proposal to comply with the most relevant market standards (ISO 27001, NIST, PCI-DSS, and COBIT) and a significant number of regulatory frameworks from central banks across the World (European Union, Switzerland, UK, Singapore, Hong Kong, India, Qatar, Kuwait, Saudi Arabia, Oman, etc.). To connect the book with the real world, a number of well-known case studies are featured to explain what went wrong with the biggest hacks of the decade, and which controls should have been in place to prevent them. The book also describes a set of well-known security tools available to support you. What You Will Learn Understand corporate IT security controls, including governance, policies, procedures, and security awareness Know cybersecurity and risk assessment techniques such as penetration testing, red teaming, compliance scans, firewall assurance, and vulnerability scans Understand technical IT security controls for unmanaged and managed devices, and perimeter controls Implement security testing tools such as steganography, vulnerability scanners, session hijacking, intrusion detection, and more.
Subject(s)
ISBN
9781484277997
Digital File Characteristics
text file PDF
Part Of
Springer Nature eBook
View MARC record | catkey: 37463644