Effective security rules and procedures do not exist for their own sake-they are put in place to protect critical assets, thereby supporting overall business objectives. Recognizing security as a business enabler is the first step in building a successful program.Information Security Fundamentals allows future security professionals to gain a solid understanding of the foundations of the field and the entire range of issues that practitioners must address. This book enables students to understand the key elements that comprise a successful information security program and eventually apply these concepts to their own efforts. The book examines the elements of computer security, employee roles and responsibilities, and common threats. It examines the need for management controls, policies and procedures, and risk analysis, and also presents a comprehensive list of tasks and objectives that make up a typical information protection program.The volume discusses organizationwide policies and their documentation, and legal and business requirements. It explains policy format, focusing on global, topic-specific, and application-specific policies. Following a review of asset classification, the book explores access control, the components of physical security, and the foundations and processes of risk analysis and risk management. Information Security Fundamentals concludes by describing business continuity planning, including preventive controls, recovery strategies, and ways to conduct a business impact analysis.

Information Security Fundamentals

Business & Money

Peltier R.

John A. Blackley

Management & Leadership

Auerbach Publishers Inc.

This book explains the methodologies, framework, and "unwritten conventions" that ethical hacks should employ to provide the maximum value to organizations that want to harden their security. It goes beyond the technical aspects of penetration testing to address the processes and rules of engagement for successful tests. The text examines testing from a strategic perspective to show how testing ramifications affect an entire organization. Security practitioners can use this book to reduce their exposure and deliver better service, while organizations will learn how to align the information about tools, techniques, and vulnerabilities that they gather from testing with their business objectives.

The Ethical Hack: A Framework for Business Value Penetration Testing 1st edition by Tiller, James S. published by Auerbach Publications [ Hardcover ]

Tiller, S.

Economics

Software Testing and Continuous Quality Improvement, Second Edition, illustrates a quality framework for software testing in traditional structured and unstructured environments. It explains how a continuous quality improvement approach promotes effective testing, and it analyzes the various testing tools and techniques that you can choose. 
Section I explains the role of QA principles and best practices in software testing. It provides a detailed overview of basic software testing techniques and an introduction of Deming''s concept of quality through a continuous improvement process. This section explores the Plan, Do, Check, Act (PDCA) process, which is applied to all aspects of software testing. 
Section II reviews the software development life cycle and describes how testing and continuous quality improvement are incorporated into each phase of development. Section III details continuous quality improvement as part of the testing process. It breaks down software testing into a series of tasks that apply Deming''s PDCA cycle. 
Section IV discusses fundamental challenges of managing testing projects, whether they are on-site or offshore. You learn how to establish effective test estimations to ensure that testing projects are on track. It also covers strategies for monitoring and managing software defects. Section V contains a brief history of software testing, previews advanced futuristic testing tools, and provides guidance for choosing the proper tool for various environments. It provides examples of some of the most popular products and offers a detailed methodology for evaluating them.

Software Testing & Continuous Quality Improvement(2nd, 05) by Lewis, William E [Hardcover (2004)]

Computers & Technology

Lewis E.

Computer Science

Building A Wireless Office

Held, Gilbert

Information Security Policies, Procedures, and Standards

Thomas R. Peltier

Building an Information Security Awareness Program

In his latest book, a pre-eminent information security pundit confessed that he was wrong about the solutions to the problem of information security. It's not technology that's the solution, but the human factor-people. But even infosec policies and procedures are insufficient if employees don't know about them, or why they're important, or what ca

Desman B.

The TCP/IP suite has evolved from an academic networking tool to the driving force behind the Internet, intranets, and extranets. Advances in networking and communications software based upon the TCP/IP protocol suite has opened a new range of technologies that have the potential to considerably effect our lives. 
A comprehensive reference, TCP/IP Professional Reference Guide provides you with detailed information covering the concepts associated with the TCP/IP protocol stack, current and emerging applications, issues such as IP addressing via DHCP versus individual addresses, security via routers and firewalls, design issues including the use of subnetting, and Ipv6. It covers the various protocols and what they do, how applications operate, addressing issues, security methods, routing, and an overview of emerging technologies. 
This book covers how various network protocols and applications operate - information that will help you in selecting applications, troubleshooting, and resolving network capacity issues. It reviews the manner in which the different components of the suite operate -you will know how and when to use certain members of the protocol suite. 
As an IT manager or consultant, you don't need to know the minutiae of every field and every protocol. While it is important to understand how to write code and configure protocols, you hire experts to do that. You need to understand the issues involved in operating or planning or operate an IP based network. You need higher levels of information, such as the effect of using DHCP vs individual network addresses, not the details of configuring DHCP. TCP/IP Professional Reference Guide describes the applications and methods, concepts and economics you need to make informed decisions for your organization.

TCP/IP Professional Reference Guide

Gilbert, Held

Networking & Cloud Computing

Information Security Risk Analysis Author

Peltier, Thomas R.

Integrating ERP, Crm, Supply Chain Management, and Smart Materials

Chorafas N.

Customer Relationship Management Systems Handbook

E., Sharp

Programming

See the best price to sell, buy or rent books by the Auerbach Publishers Inc. publisher. BookScouter helps to compare book prices from 25+ online bookstores and 30+ buyback vendors with a single search.

Books by Auerbach Publishers Inc.