Több mint 4 millió cím angol és más nyelveken! Fedezd fel új történetedet még ma!

Measuring and Managing Information Risk

Name: Measuring and Managing Information Risk
Brand: Elsevier Science
SKU: 9780443134845
Price: 26034 HUF
Availability: InStock

A FAIR Approach

Szerző: Jack Freund, Jack Jones

Nyelv:

Kötés: Puha kötésű

Kiadó: Elsevier Science

Elérhetőség: Beszállítói készleten

Küldés 14-21 napon belül

26 034 Ft

Measuring and Managing Information Risk: A Fair Approach, Second Edition provides a proven and credi...

Információk a könyvről

Szerző

Jack Freund, Jack Jones

Nyelv

Angol

Kötés

Könyv - Puha kötésű

Kiadva

2024

oldal

460

EAN

9780443134845

ISBN

0443134847

Enbook ID

44045219

Kiadó

Elsevier Science

Súly

450

Méretek

191 x 234

Teljes leírás

Measuring and Managing Information Risk: A Fair Approach, Second Edition provides a proven and credible framework for understanding, measuring, and analyzing information risk of any size or complexity using the Factor Analysis of Information Risk (FAIR) methodology developed over ten years and adopted by corporations worldwide. This thoroughly updated new edition covers such key areas as risk theory, risk calculation, scenario modeling, and communicating risk within the organization, and also includes new chapters and essays from industry professionals. It provides a step-by-step guide to help managers make better business decisions by understanding their organizational risk. In this new edition, the authors discuss the advances in quantitative cyber risk measurement using the FAIR methodology. The field has advanced significantly in the past 10 years and this all-new edition reiterates the importance of the foundations of risk measurement but adds information about modern methods to integrate quantitative risk assessment methods into your security programs. This includes the integration of security telemetry data, outside data sources, approaches to automating FAIR assessments, and how to align methods and programs to security standards and regulations. Further discussed is how such approaches are being used by third-party agencies to provide CRQ data to the investors, underwriters, and regulators. This book is a valuable resource for all those who need the foundations, methods, and techniques for measuring, assessing, and communicating cyber risk to enable an organization to build an organizational IT risk management program. It serves as both a practical how-to guide for those new to the industry as well as tenured professionals that need a formalized guide for implementation. Uses factor analysis of information risk (FAIR) as a methodology for measuring and managing risk in any organization, with insights on how to apply the FAIR methodology based on over 15 years of applied experienceCarefully balances theory with practical applicability and relevant stories of successful implementationIncludes examples from a wide variety of businesses and situations presented in an accessible writing styleNew to this edition: four chapters on Standards and Regulatory Alignment, Building Quantitative Risk Programs, Assessment Automation, and Risk Measurement Red Flags, as well as significant revisions to cover the new FAIR-CAM standard and short essays from others in the industry.