Enterprise Information Security: Information Security For Non-technical Decision Makers

by Peter H. Gregory

Information security has existed as a formal discipline since the mainframe era. Infosec, as it is sometimes called, has evolved over time and has spawned a number of formal methodologies. Universities and corporate research and development have developed several security models that have been used as a design basis for access control and trust mechanisms. Written in user-friendly terms, but using a vocabulary that security practitioners also understand, this briefing will enable the reader to get to grips with security issues so they can make informed decisions on threats and risks facing their business. Contents Security is on center stage, Threats and Vulnerabilities, Security Fundamentals - The Principles and the Mechanisms Behind Them, Security Policies and Requirements - Defining the Standard of Architecture and Behavior, Security is About People's Behavior, Protecting Corporate Information Beyond the Corporate Boundaries, Privacy, Action Items.

167 pages, Paperback

First published January 1, 2003

About the author

Peter H. Gregory, CISM, CISA, CISSP, CRISC, CDPSE, CCSK, CIPM, DRCE, is a security, privacy, and risk senior director with experience in SAAS, retail, telecommunications, advertising, non-profit, legalized gaming, manufacturing, consulting, healthcare, and local government.

Peter is the published author of over fifty books on cybersecurity and emerging technology, with editions in four languages. He has numerous interviews and articles in magazines and newspapers. In addition, he is an adjunct university faculty emeritus and program advisor at the University of Washington.