eBook[PDF]

Managing Risk in Information Systems 3rd Edition By Darril Gibson, Andy Igonor | eBook PDF

$30.00
✓ Secure checkout
✓ Instant digital download
✓ PDF document

Document details

Pages
865
File size
10.81 MB
Format
Digital PDF
Category
eBook[PDF]
About this ebook
Managing Risk in Information Systems, Third Edition by Darril Gibson and Andy Igonor is a definitive academic and professional textbook that provides a comprehensive overview of risk management and its implications on IT infrastructures and compliance. Published by Jones & Bartlett Learning, it is a core part of their Information Systems Security & Assurance Series. [1, 2, 3, 4]
📘 Book Specifications
  • Authors: Darril Gibson & Andy Igonor
  • Publisher: Jones & Bartlett Learning
  • Publication Date: November 20, 2020
  • Length: 437 pages
  • Print ISBN: 978-1284183719
  • Digital/eTextbook ISBN: 978-1284193633 [1, 2]

🔍 Core Focus and Themes
The textbook addresses risk comprehensively across four core structural categories of information systems: Data, People, Processes, and Technology. It is structured into three main progressive sections: [1, 2, 3]
  1. Identifying Business Challenges: Understanding underlying vulnerability types, threat landscapes, and compliance demands.
  2. Mitigating Risks: Strategies, methodologies, and frameworks used to minimize potential impact.
  3. Developing Risk Management Plans: Formulating actionable compliance matrices, business continuity plans, and incident response measures. [1, 2, 3, 4, 5]

🛠️ Key Topics Covered
  • The Seven Domains of IT Infrastructure: Explores risk profiles inside specific technical bounds: User, Workstation, LAN, LAN-to-WAN, WAN, Remote Access, and Application domains. [1]
  • Risk Assessment Frameworks: Breaks down the structured assessment process—Asset Identification, Threat Identification, Vulnerability Analysis, Risk Analysis, and Risk Evaluation. [1]
  • Risk Handling Strategies: Deep dive into the four foundational treatments of risk—Mitigation, Avoidance, Transfer (Sharing), and Acceptance. [1, 2]
  • Regulatory Compliance: Updated coverage of critical legal and regulatory standards including GDPR, NIST, COBIT, and CVE. [1]
  • Business Continuity & Incident Response: Tactical creation of Disaster Recovery Plans (DRPs) and the mobilization of Computer Incident Response Teams (CIRT). [1]

File included

PDF
ScholarFriends.com-managing-risk-in-information-systems-3rd-edition-by-darril-gibson.pdf 10.81 MB

Topics