• Security Controls Evaluation, Testing, and Assessment Handbook (Paperback) 9780128023242
1 1
£49.79 GBP
£58.99 GBP £49.79 GBP
Sale Sold out
Free UK Shipping

Freshly Printed - allow 10 days lead

Security Controls Evaluation, Testing, and Assessment Handbook

Understand how to assess and evaluate security controls on your system.

Leighton Johnson (Author)

9780128023242, Elsevier Science

Paperback, published 15 December 2015

678 pages, 30 illustrations
23.5 x 19 x 4.1 cm, 1.36 kg

Security Controls Evaluation, Testing, and Assessment Handbook provides a current and well-developed approach to evaluation and testing of security controls to prove they are functioning correctly in today's IT systems. This handbook shows you how to evaluate, examine, and test installed security controls in the world of threats and potential breach actions surrounding all industries and systems. If a system is subject to external or internal threats and vulnerabilities - which most are - then this book will provide a useful handbook for how to evaluate the effectiveness of the security controls that are in place.

Security Controls Evaluation, Testing, and Assessment Handbook shows you what your security controls are doing and how they are standing up to various inside and outside threats. This handbook provides guidance and techniques for evaluating and testing various computer security controls in IT systems.

Author Leighton Johnson shows you how to take FISMA, NIST Guidance, and DOD actions and provide a detailed, hands-on guide to performing assessment events for information security professionals who work with US federal agencies. As of March 2014, all agencies are following the same guidelines under the NIST-based Risk Management Framework. This handbook uses the DOD Knowledge Service and the NIST Families assessment guides as the basis for needs assessment, requirements, and evaluation efforts for all of the security controls. Each of the controls can and should be evaluated in its own unique way, through testing, examination, and key personnel interviews. Each of these methods is discussed.

  1. Introduction to Assessments
  2. Risk and Security
  3. Statutory & Regulatory GRC
  4. Federal RMF Requirements
  5. Risk Management Framework - SP 800-37, rev.1
  6. Roles and Responsibilities
  7. Assessment Process
  8. Assessment Methods
  9. Assessment Techniques for each kind of control
  10. Evidence of Assessment
  11. Reporting
  12. Conclusion

Appendix A: Templates for RMF documents and artifacts commonly required or requested

Appendix B: Templates for RMF Policies and Procedures by Control Family

Appendix C: Assessment & Testing Tools

Subject Areas: Computer security [UR]
View full details