07.31.05
Risk Management for Computer Security: Protecting Your Network and Information Assets
Risk Management for Computer Security: Protecting Your Network and Information Assets
Author: Andy Jones (Usually dispatched within 24 hours)
Best Risk Management book on the market today!There are many books on the market dealing with risk management as part of InfoSec. So, I wasn’t sure that this one would be better, or provide any new information. I was first surprised to find it written in a non-techie way. That means the information is easy to read and more importantly, easy to understand. Also, because it is written by two authors from the UK, it offers a slightly different look than what has been written on the topic by numerous U.S. authors.
What I especially liked about this book is that it not only dealt with all of today’s relative risk management issues but the section on “The Threat Assessment Process” was really well done. Often this is not given the importance it deserves as other authors concentrated on the risks. However, one must know the enemies to defend again them. This part was a nice surprise.
So for today’s professional whose experience is vast or limited, this book offers all you need to know about risk management as it relates to InfoSec - or “Computer Security” as the authors call it.