Information Security Roles & Responsibilities Made Easy, Version 2
Publisher: Information Shield
Published: June 1, 2005
Format: Hardcover
Number of pages: 288
ISBN-13: 9781881585121
First sentence: The total cost of ownership (TCO) models developed by a variety of industry analysts such as the Gartner Group indicate that labor represents anywhere from two-thirds to three-quarters of the on-going cost associated with information technology.
Description: Chapter 1: What This Book And CD-ROM Can Do For You 

Chapter 2: Reasons To Establish Clear Roles & Responsibilities 


Chapter 3: Persuading Management To Document Roles and Responsibilities 
Memo To Management

Chapter 4: Before You Document Roles & Responsibilities 

Chapter 5: Updating Roles & Responsibilities 

Chapter 6: Who Should Write Roles & Responsibilities Documents 

Chapter 7: Review & Approval Of Roles &Responsibilities 

Chapter 8: Resources Required To Document Roles & Responsibilities 

Chapter 9: Time Estimates To Document Roles & Responsibilities 

Chapter 10: Key Information Security Documents 

Chapter 11: Organizational Mission Statements 

Chapter 12: Job Descriptions For Specific Team Players 

Chapter 13: Information Security Reporting Relationships 

Chapter 14: Template Customization Factors 

Chapter 15: Owner, Custodian, And User Roles 

Chapter 16: Roles & Responsibilities Of Product Vendors 

Chapter 17: Roles & Responsibilities Of Outsourcing Firms 

Chapter 18: Adjustments For Smaller Organizations 

Chapter 19: A Centralized Organizational Structure 

Chapter 20: Workers In Information Security Related Positions Of Trust 

Chapter 21: Common Mistakes You Should Avoid

Appendix A: Staffing Levels
Information Security Staffing: Calculating the Standard of Due Care 

Appendix B: Personal Qualifications
Excellent Communication Skills
Ability to Resolve Conflicts Between Security and Business Objectives
Ability to See the Big Picture
Basic Familiarity with Information Security Technology
Commitment to Staying on Top of the Technology
Familiarity with Information Security Management
Tolerance for Ambiguity and Uncertainty
Ability to Manage Many Important Projects Simultaneously
Ability to Work Independently
A Certain Amount of Polish

Appendix C: Performance Criteria
Information Security Department Metrics
Individual Worker Metrics

Appendix D: Professional Certifications 

Appendix E: Responsibility and Liability 

Appendix F: Sample User Responsibility Agreement 

Appendix G: Disclosing Roles and Responsibilities 

Appendix H: Role Based Access Control
Table of contents: title: What This Book And CD-ROM Can Do For You
class: chapter
label: 01; title: Reasons To Establish Clear Roles & Responsibilities
class: part
label: 02