Assessing Information Security: Strategies, Tactics, Logic and Framework - Softcover

Andrew Vladimirov; Konstantin Gavrilenko; Andriej Michajlowski

Softcover

ISBN 10: 1849280355 ISBN 13: 9781849280358

Publisher: IT Governance Publishing, 2010

Synopsis

What do information security and the art of war have in common? The answer, this book argues, is a great deal. Although the authors have an expert technical knowledge of information security, they strongly believe that technical and procedural measures cannot offer a solution on their own. Information security is not painting by numbers. You can tick all the right boxes and acquire the latest technology, and you may fail all the same. This is because information security is ultimately a human problem, not a technical one. In the end, the threats to your information security come from human beings, not from machines. Although one problem you will face is simple human error, the major threat to your business information is from the criminal. Cybercrime is on the move. It is in a state of constant evolution, capable of adapting both to developments in technology and to whatever security measures its targets have already put in place. It will seek out your weak points in order to exploit them for its own advantage. However, although the people who want to harm your business will try to take you by surprise, they are also bound to have weaknesses of their own. Because the activity of the cybercriminal is both deliberate and hostile, they can be compared to a military adversary. So if you want to defend yourself from cybercrime you can learn from military strategy. Fighting cybercrime is about more than bureaucracy and compliance. Your company's approach to information security has to be integrated with your overall business goals. The people at the top have to provide leadership, while the people at the bottom need to understand the company's information security policy and be able to show initiative when faced with an unexpected attack. If you want to take active steps to deter the cybercriminal, then this book is for you. It will help you plan the right strategy for defending your business from cybercrime.

About this title

From the Back Cover

Cybercrime is on the move. It is in a state of constant evolution, capable of adapting both to developments in technology and to whatever security measures its targets have already put in place. Cybercrime and related forms of malicious activity will seek out your weak points in order to exploit them for their own advantage.

Because the activity of the cybercriminals is both deliberate and hostile, they can be compared to military adversaries. So, if you want to defend yourself effectively from such attacks, you can learn from military strategy.

Fighting cybercrime is about more than bureaucracy and compliance. A key objective of any information security assessment is to ensure that the relevant policies are not just treated by the staff as a formality. Your company’s approach to information security has to be integrated with your overall business goals. To protect your sensitive information and systems, you must avoid a fortress mentality and be capable of adapting to an ever-changing environment. This means you need to plan an effective strategy for deterring the cybercriminal.

Assessing Information Security deals with the philosophy, strategy and tactics of soliciting, managing and conducting information security audits of all flavours. It will give you the founding principles around information security assessments and why they are important. The book provides a fluid framework for developing an astute 'information security mind' capable of rapid adaptation to evolving technologies, markets, regulations, laws, and so on.

The authors, Dr Andrew Vladimirov, Konstantin Gavrilenko and Andriej Michajlowski, are information security experts. They are the joint founders of Arhont Ltd, a consultancy which offers a range of information security services, including auditing, monitoring and investigation. Arhont provides advice on information security to major companies and multinational corporations.

Read this book and discover what you can do to beat cybercrime!

About the Author

The authors are information security experts. They are the joint founders of Arhont Ltd., a consultancy which offers a range of information security services, including auditing, monitoring and investigation. Arhont provides advice on information security to major companies and multinational corporations. Dr. Andrew Vladimirov is a security researcher. His fields of expertise include network security and applied cryptography, and he has extensive experience of performing information security assessments. Konstantin Gavrilenko has over 15 years of experience in IT and security. As a researcher, information security is his specialty, and he has a particular interest in wireless security. He holds a BSc in Management Science from DeMontfort University and an MSc in Management from Lancaster University. Andriej Michajlowski is an expert on network security. His research interests include user and device authentication mechanisms and wireless networking security. He has extensive experience of carrying out internal and external information security assessments. He is a graduate of the University of Kent at Canterbury and he holds an MBA.

Edition details

• Publisher: IT Governance Publishing
• Publication date: 2010
• ISBN 10: 1849280355
• ISBN 13: 9781849280358
• Binding: Paperback
• Language: English
• Edition number: 1
• Number of pages: 412