Managing Risk in Information Systems 3rd Edition By Darril Gibson, Andy Igonor | eBook PDF
$30.00
Secure checkout
Instant digital download
PDF document
Document details
- Pages
- 865
- File size
- 10.81 MB
- Format
- Digital PDF
- Category
- eBook[PDF]
Sign in or create a free account to continue. Your purchase will be saved in My Downloads.
About this ebook
Managing Risk in Information Systems, Third Edition by Darril Gibson and Andy Igonor is a definitive academic and professional textbook that provides a comprehensive overview of risk management and its implications on IT infrastructures and compliance. Published by Jones & Bartlett Learning, it is a core part of their Information Systems Security & Assurance Series. [1, 2, 3, 4]
📘 Book Specifications
- Authors: Darril Gibson & Andy Igonor
- Publisher: Jones & Bartlett Learning
- Publication Date: November 20, 2020
- Length: 437 pages
- Print ISBN: 978-1284183719
- Digital/eTextbook ISBN: 978-1284193633 [1, 2]
🔍 Core Focus and Themes
The textbook addresses risk comprehensively across four core structural categories of information systems: Data, People, Processes, and Technology. It is structured into three main progressive sections: [1, 2, 3]
- Identifying Business Challenges: Understanding underlying vulnerability types, threat landscapes, and compliance demands.
- Mitigating Risks: Strategies, methodologies, and frameworks used to minimize potential impact.
- Developing Risk Management Plans: Formulating actionable compliance matrices, business continuity plans, and incident response measures. [1, 2, 3, 4, 5]
🛠️ Key Topics Covered
- The Seven Domains of IT Infrastructure: Explores risk profiles inside specific technical bounds: User, Workstation, LAN, LAN-to-WAN, WAN, Remote Access, and Application domains. [1]
- Risk Assessment Frameworks: Breaks down the structured assessment process—Asset Identification, Threat Identification, Vulnerability Analysis, Risk Analysis, and Risk Evaluation. [1]
- Risk Handling Strategies: Deep dive into the four foundational treatments of risk—Mitigation, Avoidance, Transfer (Sharing), and Acceptance. [1, 2]
- Regulatory Compliance: Updated coverage of critical legal and regulatory standards including GDPR, NIST, COBIT, and CVE. [1]
- Business Continuity & Incident Response: Tactical creation of Disaster Recovery Plans (DRPs) and the mobilization of Computer Incident Response Teams (CIRT). [1]
File included
ScholarFriends.com-managing-risk-in-information-systems-3rd-edition-by-darril-gibson.pdf
10.81 MB