Information Security Risk Assessment Toolkit
Practical Assessments through Data Collection and Data Analysis

Practical, achievable and sustainable information security risk assessment methodology. Additional materials for this book are available on the following website. Please copy and paste this URL on your browser: http://securitytoolk.it/

Mark Talabis (Author), Jason Martin (Author)

9781597497350, Elsevier Science

Paperback / softback, published 14 December 2012

278 pages, 45 illustrations
23.5 x 19 x 1.8 cm, 0.57 kg

In order to protect company’s information assets such as sensitive customer records, health care records, etc., the security practitioner first needs to find out: what needs protected, what risks those assets are exposed to, what controls are in place to offset those risks, and where to focus attention for risk treatment. This is the true value and purpose of information security risk assessments. Effective risk assessments are meant to provide a defendable analysis of residual risk associated with your key assets so that risk treatment options can be explored. Information Security Risk Assessment Toolkit gives you the tools and skills to get a quick, reliable, and thorough risk assessment for key stakeholders.

Chapter 1: Information Security Risk Assessments

Subject Areas: Computer security [UR], Computing & information technology [U], Operational research [KJT]