Using the factor analysis of information risk (FAIR) methodology developed over ten years and adopted by corporations worldwide, Measuring and Managing Information Risk provides a proven and credible framework for understanding, measuring, and analyzing information risk of any size or complexity. Intended for organizations that need to either build a risk management program from the ground up or strengthen an existing one, this book provides a unique and fresh perspective on how to do a basic quantitative risk analysis. Covering such key areas as risk theory, risk calculation, scenario modeling, and communicating risk within the organization, Measuring and Managing Information Risk helps managers make better business decisions by understanding their organizational risk. Uses factor analysis of information risk (FAIR) as a methodology for measuring and managing risk in any organization.Carefully balances theory with practical applicability and relevant stories of successful implementation.Includes examples from a wide variety of businesses and situations presented in an accessible writing style. INDICE: Chapter 1: Introduction Chapter 2: Basic Risk Concepts Chapter 3: The FAIR Risk Ontology Chapter 4: FAIR Terminology Chapter 5: Measurement Chapter 6: Analysis Process Chapter 7: Interpreting Results Chapter 8: Risk Analysis Examples Chapter 9: Thinking about Risk Scenarios Using FAIR Chapter 10: Common Mistakes Chapter 11: Controls Chapter 12: Risk Management Chapter 13: Information Security Metrics Chapter 14: Implementing Risk Management
- ISBN: 978-0-12-420231-3
- Editorial: Butterworth-Heinemann
- Encuadernacion: Rústica
- Páginas: 400
- Fecha Publicación: 13/10/2014
- Nº Volúmenes: 1
- Idioma: Inglés