Creating an Information Security Program From Scratch

This book is written for the first security hire in an organization; either an individual moving into this role from within the organization or hired into the role.

List of contents

Preface. Chapter 1 Getting Started. Chapter 2 The Things You Must Do. Chapter 3 Asset Management. Chapter 4 Vulnerability Management. Chapter 5 Incident Management. Chapter 6 The Endpoint. Chapter 7 Email Security. Chapter 8 The Network. Chapter 9 Integrating Security Into Software Development. Chapter 10 Disasters. Chapter 11 Access Control. Chapter 12 Human Issues. Chapter 13 Maturity. Index.

About the author

Walter Williams has served as an infrastructure and security architect at firms as diverse as GTE Internetworking, State Street Corp, Teradyne, The Commerce Group and EMC. He has since moved to security leadership, where he'd served as at IdentityTruth, Passkey, Lattice Engines, and Monotype. He is an outspoken proponent of design before build, an advocate of frameworks and standards, and has spoken at Security B-Sides, Source Boston, Boston Application Security Conference, Rochester Security Summit, Wall of Sheep Village within DefCon, RiskSec Toronto and other venues . His articles on Security and Service Oriented Architecture have appeared in the Information Security Management Handbook, and he has a book with CRC press on the same topic. He sat on the board of directors for the New England ISSA chapter and was a member of the program committee for Metricons 8 and 10. He has a masters degree in Anthropology from Hunter College.

Summary

This book is written for the first security hire in an organization; either an individual moving into this role from within the organization or hired into the role.

Product details

• Authors: Walter Williams, Williams Walter
• Publisher: Taylor & Francis Ltd.
• Languages: English
• Product format: Hardback
• Released: 30.09.2021
• EAN: 9780367554644
• ISBN: 978-0-367-55464-4
• No. of pages: 212
• Subjects: Natural sciences, medicine, IT, technology > IT, data processing > IT; COMPUTERS / Management Information Systems, COMPUTERS / Security / General, COMPUTERS / Information Technology, Privacy & data protection, Privacy and data protection, Ethical & social aspects of IT, Computer security, Legal aspects of IT, Computer architecture & logic design, COMPUTERS / Human-Computer Interaction (HCI), Computer fraud & hacking, COMPUTERS / Computer Architecture, Computer architecture and logic design, Computer fraud and hacking, Network Management, COMPUTERS / Security / Network Security, Digital and information technologies: Legal aspects