Security Controls Evaluation, Testing, and Assessment Handbook

Johnson B.Tech In Computer Science, Leighton

ISBN 10: 0128184272 / ISBN 13: 9780128184271

Published by Academic Press, 2019

About this Item

Has a sturdy binding with some shelf wear. May have some markings or highlighting. Used copies may not include access codes or Cd's. Slight bending may be present.

Seller Inventory # GBV.0128184272.G

Bibliographic Details

• Title: Security Controls Evaluation, Testing, and Assessment Handbook
• Publisher: Academic Press
• Publication Date: 2019
• Language: English
• ISBN 10: 0128184272
• ISBN 13: 9780128184271
• Binding: Soft cover
• Edition: 2nd Edition
• Condition: good

About this title

Synopsis

Security Controls Evaluation, Testing, and Assessment Handbook, Second Edition, provides a current and well-developed approach to evaluate and test IT security controls to prove they are functioning correctly. This handbook discusses the world of threats and potential breach actions surrounding all industries and systems. Sections cover how to take FISMA, NIST Guidance, and DOD actions, while also providing a detailed, hands-on guide to performing assessment events for information security professionals in US federal agencies. This handbook uses the DOD Knowledge Service and the NIST Families assessment guides as the basis for needs assessment, requirements and evaluation efforts.

• Provides direction on how to use SP800-53A, SP800-115, DOD Knowledge Service, and the NIST Families assessment guides to implement thorough evaluation efforts
• Shows readers how to implement proper evaluation, testing, assessment procedures and methodologies, with step-by-step walkthroughs of all key concepts
• Presents assessment techniques for each type of control, provides evidence of assessment, and includes proper reporting techniques

About the Author

Leighton Johnson, the CTO of ISFMT (Information Security Forensics Management Team), a provider of cybersecurity & forensics consulting and certification training, has presented computer security, cyber security and forensics lectures, conference presentations, training events and seminars all across the United States, Asia and Europe. He has over 40 years’ experience in Computer Security, Cyber Security, Software Development and Communications Equipment Operations & Maintenance; Primary focus areas include computer security, information operations & assurance, incident response & forensics investigations, software system development life cycle focused on testing of systems, systems engineering and integration activities, database administration and cyber defense activities.