Information Protection Playbook [electronic resource].
Kane, Greg.
Koppel, Lorna.
Burlington : Elsevier Science,
2013.
 The primary goal of the Information Protection Playbook is to serve as a comprehensive resource for information protection (IP) professionals who must provide adequate information security at a reasonable cost. It emphasizes a holistic view of IP: one that protects the applications, systems, and networks that deliver business information from failures of confidentiality, integrity, availability, trust and accountability, and privacy.   Using the guidelines provided in the Information Protection Playbook, security and information technology (IT) managers will learn 
Description based upon print version of record.
Front Cover; Information Protection Playbook; Copyright Page; Contents; Acknowledgments; Executive Summary; About the Information Protection Playbook; IP Program; Introduction; Assumptions; IP Strategy; 1 Information Protection Function One: Governance; Implementation One: Strategic Management; Major Milestones; Six Strategic Management Milestones; 1. Start-up; 2. Examine Existing Strategy; 3. Compare Best Practice; 4. Strategic Options; 5. Strategy and Road Map; 6. Close-Down; Key Points of the Strategic Management Process; Implementation Two: Reporting and Communication
Implementation Three: PoliciesKey Points; Implementation Four: Regulations and Compliance Management; Implementation Five: Roles and Responsibilities; Key Points; Implementation Six: Procedures and Guidelines; Implementation Seven: Portfolio Management; Governance Improvement; Additional Information; 2 Information Protection Function Two: Program Planning; Baselines, Standards, Procedures, and Guidelines; Accountability and Resources; Metrics; For More Information; 3 Information Protection Function Three: Risk Management; Risk Assessment; Risk Assessment Procedure
Risk Prioritization ProcedureKey Points; Risk Communication Procedure; Risk Management Methodologies; For More Information; 4 Information Protection Function Four: Incident Response Management; Process; Plans, Exercises, Activation, Documentation, and Improvement; For More Information; 5 Information Protection Function Five: Program Administration; Compliance; Metrics; Change Management; Software Development and Deployment; Awareness; Key Points; For More Information; Appendix A: Playbook Summary; What's Here; How to Use This Appendix; Summary; Appendix B: Board of Directors Presentation
What's HereHow to Use This Appendix; Example Presentation; Appendix C: Information Protection Policies Checklist; What's Here; How to Use This Appendix; Example Policy Documents; Example Data Classification Policy Elements; Appendix D: An Example Roles and Responsibilities RACI Matrix; What's Here; How to Use This Appendix; Example RACI Matrix; Appendix E: Risk Prioritization Procedure Matrix; What's Here; How to Use This Appendix; Risk Prioritization Matrix; Appendix F: Security Awareness and Training Menu; What's Here; How to Use This Appendix
Security Awareness and Training Delivery MethodsSecurity Awareness and Training Menu; Appendix G: Risk Assessment and Compliance Checklist; What's Here; How to Use This Appendix; Risk Assessment and Compliance Checklist; Appendix H: Incident Response; What's Here; How to Use This Appendix; Incident Response Planning; Incident Reaction; Appendix I: Facility Management Self-Assessment; What's Here; How to Use This Appendix; Self-assessment Questionnaire; Appendix J: Roles in Information Protection; What's Here; How to Use This Appendix; Example Positions; Top Global Security Executive
Global Security Executive
 The primary goal of the Information Protection Playbook is to serve as a comprehensive resource for information protection (IP) professionals who must provide adequate information security at a reasonable cost. It emphasizes a holistic view of IP: one that protects the applications, systems, and networks that deliver business information from failures of confidentiality, integrity, availability, trust and accountability, and privacy.   Using the guidelines provided in the Information Protection Playbook, security and information technology (IT) managers will learn