2004Unpublished venueRequires access

Management Of Information Security

Michael E. Whitman, Herbert J. Mattord

Open publisher page 199 citations

Abstract

1. Introduction to the Management of Information Security 2. Planning for Security 3. Planning for Contingencies 4. Information Security Policy 5. Developing the Security Program 6. Security Management Models and Practices 7. Risk Management: Identifying and Assessing Risk 8. Risk Management: Controlling Risk 9. Protection Mechanisms 10. Personnel and Security 11. Law and Ethics 12. Information Security Project Management Appendix A: NIST SP 800-26, Security Self-Assessment Guide for Information Technology Systems, and ISO 17799:2005 Overview

About this research paper

What this paper is about

1. Introduction to the Management of Information Security 2. Planning for Security 3. Planning for Contingencies 4. Information Security Policy 5. Developing the Security Program 6. Security Management Models and Practices 7. Risk Management: Identifying and Assessing Risk 8. Risk Management: Controlling Risk 9. Protection Mechanisms 10. Personnel and Security 11. Law and Ethics 12. Information Security Project Management Appendix A: NIST SP 800-26, Security Self-Assessment Guide for Information Technology Systems, and ISO 17799:2005 Overview

Why it matters

OpenAlex reports 199 citations for this work. Citation counts describe recorded attention and do not establish research quality.

Key contribution

A contribution statement is not available in the OpenAlex record.

Method / approach

Method details are not available in the OpenAlex metadata.

Main findings

Findings are not separately available in the OpenAlex metadata.

Limitations

Limitations are not available in the OpenAlex metadata.

Applications

Application details are not available in the OpenAlex metadata.

Available abstract

1. Introduction to the Management of Information Security 2. Planning for Security 3. Planning for Contingencies 4. Information Security Policy 5. Developing the Security Program 6. Security Management Models and Practices 7. Risk Management: Identifying and Assessing Risk 8. Risk Management: Controlling Risk 9. Protection Mechanisms 10. Personnel and Security 11. Law and Ethics 12. Information Security Project Management Appendix A: NIST SP 800-26, Security Self-Assessment Guide for Information Technology Systems, and ISO 17799:2005 Overview

Key concepts: Information security management, Standard of Good Practice, Security information and event management, Certified Information Security Manager, Security management, Threat, Information security, ITIL security management

Related papers

Back to paper searchBrowse research topicsOriginal source
Management Of Information Security — Research Paper | ScholarLens