Information Security Risk Assessment Toolkit: Practical Assessments through Data Collection and Data Analysis

by Mark Talabis, Jason Martin

In order to protect company’s information assets such as sensitive customer records, health care records, etc., the security practitioner first needs to find what needs protected, what risks those assets are exposed to, what controls are in place to offset those risks, and where to focus attention for risk treatment. This is the true value and purpose of information security risk assessments. Effective risk assessments are meant to provide a defendable analysis of residual risk associated with your key assets so that risk treatment options can be explored. Information Security Risk Assessment Toolkit  gives you the tools and skills to get a quick, reliable, and thorough risk assessment for key stakeholders.

278 pages, Paperback

First published January 1, 2012

Reviews

[John · Rating 2 out of 5]

The book omitted two notable information security risk assessment frameworks, and some referenced content is outdated. There were several spelling errors that should have been discovered and corrected in editing. It seems okay as a foundational subject read, but it was not what I was hoping for based on the Amazon books description.

[Rasha Fatani · Rating 5 out of 5]

Am

For any one interested in or working in cyber security risk assessments this book is for you.
Easy to follow and understand with practical scenarios

[Andrew · Rating 2 out of 5]

The book contains some useful information, but this is completely overshadowed by the horrific editing. Poor word choice, typos, missing punctuation, repeated sentences, and even (in Chapter 6) what's clearly a proofreader's note left in the main text. This is embarrassingly bad, Syngress.