Visible Ops Security: Achieving Common Security and IT Operations Objectives in 4 Practical Steps

by Gene Kim, Paul Love, George Spafford

Visible Ops Security builds upon the methodology presented in the original Visible Ops Handbook. It guides information security professionals in strengthening relationships with IT operations and development groups to advance IT objectives and business goals. It addresses the people side of IT, empowering security to work with operations teams to achieve closely aligned objectives and with development and release teams to integrate security requirements into preproduction work. The Visible Ops Security methodology helps IT organizations move beyond a focus on technology to address the core operational aspects of security. It complements publications that focus on securing the network, access, and data, including COBIT (Control Objectives for Information and related Technology), ISO 27001:2005 (International Standards Organization), and ITIL® (IT Infrastructure Library) manuals. It promotes effective teamwork, which helps security professionals ensure that security is built into key development and production processes. This effort positions the IT organization to meet business needs by delivering highly available, cost-effective, and secure services.

Genres: Nonfiction, Technology, Technical, Business

112 pages, Paperback

First published March 12, 2008

About the author

Gene Kim is a multiple award-winning CTO, Tripwire founder, Visible Ops co-author, IT Ops/Security Researcher, Theory of Constraints Jonah, a certified IS auditor and a rabid UX fan.

He is passionate about IT operations, security and compliance, and how IT organizations successfully transform from "good to great."

Reviews

[Jeff · Rating 3 out of 5]

I thought that this was an okay read, but about 60% of the content was a rote rehash of the much more generally applicable The Visible Ops Handbook. With this book smaller than a lot of coffee table books, that doesn't leave a whole lot of content for the money. Worth borrowing, not worth buying.

[Shaun Mouton · Rating 4 out of 5]

Like the other Visible Ops books, its strength lies in the distillation of complex information to a set of essentials well suited to a management audience. These books can be used to guide processes towards functional implementations of ITIL and a healthier service orientation.

[Jeremy · Rating 4 out of 5]

Not a pleasure read, but a good read for IT or Information Security professionals.