具体描述
While information security is an ever-present challenge for all types of organizations today, most focus on providing security without addressing the necessities of staff, time, or budget in a practical manner. "Information Security Cost Management" offers a pragmatic approach to implementing information security, taking budgetary and real-world constraints into consideration. By providing frameworks, step-by-step processes, and project management breakdowns, this book demonstrates how to design the best security strategy with the resources you have available.Organized into five sections, the book: focuses on setting the right road map so that you can be most effective in your information security implementations; discusses cost-effective staffing, the single biggest expense to the security organization; presents practical ways to build and manage the documentation that details strategy, provides resources for operating annual audits, and illustrates how to advertise accomplishments to senior management effectively; identifies high-risk areas, focusing limited resources on the most imminent and severe threats; and, describes how to manage the key access controls when faced with manual user management, how to automate user management tasks in a cost effective manner, and how to deal with security breaches. Demonstrating strategies to maximize a limited security budget without compromising the quality of risk management initiatives, "Information Security Cost Management" helps you save your organization time and money. It provides the tools required to implement policies, processes, and training that are crucial to the success of a company's security.
