INFORMATION SECURITY MANAGEMENT HANDBOOK
ACCESS CONTROL SYSTEMS AND METHODOLOGY ACCESS CONTROL TECHNIQUES SENSITIVE OR CRITICAL DATA ACCESS CONTROLS AN INTRODUCTION TO ROLE-BASED ACCESS CONTROL SMART CARDS A GUIDE TO EVALUATING TOKENS ACCESS CONTROL ADMINISTRATION IDENTITY MANAGEMENT: BENE?TS AND CHALLENGES TELECOMMUNICATIONS AND NETWORK SECURITY COMMUNICATIONS AND NETWORK SECURITY AN EXAMINATION OF FIREWALL ARCHITECTURES THE FIVE W’S AND DESIGNING A SECURE, IDENTITY-BASED, SELF-DEFENDING NETWORK (5W NETWORK) MAINTAINING NETWORK SECURITY: AVAILABILITY VIA INTELLIGENT AGENTS PBX FIREWALLS: CLOSING THE BACK DOOR INTERNET, INTRANET, EXTRANET SECURITY VOICE OVER WLAN SPAM WARS: HOW TO DEAL WITH JUNK E-MAIL NETWORK ATTACKS AND COUNTERMEASURES AUDITING THE TELEPHONY SYSTEM: DEFENSES AGAINST COMMUNICATIONS SECURITY BREACHES AND TOLL FRAUD SECURITY MANAGEMENT PRACTICES SECURITY MANAGEMENT CONCEPTS AND PRINCIPLES THE CONTROLS MATRIX INFORMATION SECURITY GOVERNANCE BELTS AND SUSPENDERS: DIVERSITY IN INFORMATION TECHNOLOGY SECURITY BUILDING MANAGEMENT COMMITMENT THROUGH SECURITY COUNCILS, OR SECURITY COUNCIL CRITICAL SUCCESS FACTORS RISK MANAGEMENT DEVELOPING AND CONDUCTING A SECURITY TEST AND EVALUATION ENTERPRISE SECURITY MANAGEMENT PROGRAM TECHNOLOGY CONVERGENCE AND SECURITY: A SIMPLI?ED RISK MANAGEMENT MODEL EMPLOYMENT POLICIES AND PRACTICES PEOPLE, PROCESSES, AND TECHNOLOGY: A WINNING COMBINATION POLICIES, STANDARDS, PROCEDURES, AND GUIDELINES BUILDING AN EFFECTIVE PRIVACY PROGRAM TRAINING EMPLOYEES TO IDENTIFY POTENTIAL FRAUD AND HOW TO ENCOURAGE THEM TO COME FORWARD SECURITY MANAGEMENT PLANNING BEYOND INFORMATION SECURITY AWARENESS TRAINING: IT IS TIME TO CHANGE THE CULTURE ESTABLISHING A SUCCESSFUL SECURITY AWARENESS PROGRAM APPLICATIONS AND SYSTEMS DEVELOPMENT SECURITY SYSTEM DEVELOPMENT CONTROLS SYSTEM DEVELOPMENT SECURITY METHODOLOGY SOFTWARE ENGINEERING INSTITUTE CAPABILITY MATURITY MODEL MALICIOUS CODE ORGANIZED CRIME AND MALWARE METHODS OF ATTACK ENABLING SAFER DEPLOYMENT OF INTERNET MOBILE CODE TECHNOLOGIES CRYPTOGRAPHY CRYPTO CONCEPTS, METHODOLOGIES AND PRACTICES BLIND DETECTION OF STEGANOGRAPHIC CONTENT IN DIGITAL IMAGES USING CELLULAR AUTOMATA AN OVERVIEW OF QUANTUM CRYPTOGRAPHY ELLIPTIC CURVE CRYPTOGRAPHY: DELIVERING HIGH-PERFORMANCE SECURITY FOR E-COMMERCE AND COMMUNICATIONS SECURITY ARCHITECTURE AND MODELS PRINCIPLES OF COMPUTER AND NETWORK ORGANIZATIONS, ARCHITECTURES, AND DESIGNS ENTERPRISE ASSURANCE: A FRAMEWORK EXPLORED OPERATIONS SECURITY OPERATIONS CONTROLS MANAGING UNMANAGED SYSTEMS RESOURCE PROTECTION REQUIREMENTS UNDERSTANDING SERVICE LEVEL AGREEMENTS BUSINESS CONTINUITY PLANNING AND DISASTER RECOVERY PLANNING BUSINESS CONTINUITY PLANNING BUILDING MAINTENANCE PROCESSES FOR BUSINESS CONTINUITY PLANS IDENTIFYING CRITICAL BUSINESS FUNCTIONS SELECTING THE RIGHT BUSINESS CONTINUITY STRATEGY DISASTER RECOVERY PLANNING CONTINGENCY AT A GLANCE THE BUSINESS IMPACT ASSESSMENT PROCESS AND THE IMPORTANCE OF USING BUSINESS PROCESS MAPPING HOW TO TEST BUSINESS CONTINUITY AND DISASTER RECOVERY PLANS AND HOW OFTEN LAW, INVESTIGATION, AND ETHICS INFORMATION LAW SARBANES–OXLEY COMPLIANCE: A TECHNOLOGY PRACTITIONER’S GUIDE HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT SECURITY RULE THE ETHICAL AND LEGAL CONCERNS OF SPYWARE MAJOR CATEGORIES OF COMPUTER CRIME THE EVOLUTION OF THE SPLOIT COMPUTER CRIME PHISHING: A NEW TWIST TO AN OLD GAME IT’S ALL ABOUT POWER: INFORMATION WARFARE TACTICS BY TERRORISTS, ACTIVISTS, AND MISCREANTS INCIDENT HANDLING DCSA: A PRACTICAL APPROACH TO DIGITAL CRIME SCENE ANALYSIS WHAT A COMPUTER SECURITY PROFESSIONAL NEEDS TO KNOW ABOUT E-DISCOVERY AND DIGITAL FORENSICS HOW TO BEGIN A NON-LITURGICAL FORENSIC EXAMINATION 10 PHYSICAL SECURITY ELEMENTS OF PHYSICAL SECURITY PHYSICAL SECURITY FOR MISSION-CRITICAL FACILITIES AND DATA CENTERS