Read more
This book on Governance, Risk Management Compliance (GRC) and Data Privacy is designed to equip apprentices, students and professionals across various industries with a deep understanding of this holistic approach to organizational security and risk management, quality management and regulatory responsibilities. It involves aligning a company's governance structure, quality and risk processes, and compliance and data privacy activities to better enable the achievement of the company's strategic goals. It also looks at what is an Enterprise Security Architecture through the lenses of TOGAF and SABSA, which isn't about the technical implementation; think of building a house where you get an architect to design it and you ensure the construction is aligned to best practices and your goals.
Whether you are an InfoSec/Cyber specialist, a risk management practitioner, or simply seeking to enhance your knowledge in this domain, this book will provide you with the necessary framework and tools to excel in your current or future role. It teaches you the fundamentals of GRC, including what GRC is and why it is important; the key components of GRC; how to implement a GRC program; what Data Privacy is beyond protection; and how to use GRC to improve your company's performance.
List of contents
Introduction. Chapter 1: Social Science and Information Security. Chapter 2: The Importance of Governance, Risk, and Compliance in Modern Business. Chapter 3: Business-Related Security Governance and Culture. Chapter 4: Building an Effective Business-Aligned Security Program. Chapter 5: Introduction to Risk Management and Its Role in GRC. Chapter 6: GRC automation. Chapter 7: Data Privacy and Protection. Chapter 8: The Strategic Role of Enterprise Security Architecture in Governance, Risk, and Compliance. Chapter 9: Developing Assurance Programmes and Controls. Chapter 10: Standards and Frameworks. Chapter 11: Exploring Career Pathways. Chapter 12: Drawing it all together. Bibliography.
About the author
Dr Michael Brass is a senior information security leader with 20+ years, since 2000, of experience of Information Security, Cybersecurity and IT within the technology, manufacturing, charity, financial and public Arms Length Bodies sectors in the UK. He has a proven track record of delivering innovative and practical solutions that are business-focused and pragmatic, driving digital transformation efforts.
