Information risk management : a practitioner's guide /
Sutton, David(Information security practitioner),author.
Includes QR code.
Includes bibliographical references and index.
1. The need for information risk management2. Review of information security fundamentals3. The information risk management programme 4. Risk identification 5. Threat and vulnerability assessment 6. Risk analysis and risk evaluation 7. Risk treatment 8. Risk reporting and presentation 9. Communication, consultation, monitoring and review 10. The NCSC Certified Certification scheme 11. HMG Security-related documents 12. Appendix A -- Taxonomies and descriptions 13. Appendix B -- Typical threats and hazards 14. Appendix C -- Typical vulnerabilities 15. Appendix D -- Information Risk Controls 16. Appendix E -- Methodologies, guidelines and tools 17. Appendix F -- Templates 18. Appendix G -- HMG cyber security guidelines 19. References and further reading
Information technology
Risk management.
Information technology
Risk management.