Management of Information Security

by Michael Whitman, Herbert J. Mattord

Equip your students with a management-focused overview of information security as well as the tools to effectively administer it with Whitman/Mattord's MANAGEMENT OF INFORMATION SECURITY, Sixth Edition. More than ever, we need to prepare information security management students to build and staff security programs capable of securing systems and networks to meet the challenges in a world where continuously emerging threats, ever-present attacks and the success of criminals illustrate weaknesses in current information technologies. This text offers an exceptional blend of skills and experiences to administer and manage the more secure computing environments that organizations need. Reflecting the latest developments from the field, it includes updated coverage of NIST, ISO and security governance along with emerging concerns like Ransomware, Cloud Computing and the Internet of Things.

Genres: Textbooks, School, Reference

672 pages, Paperback

First published January 27, 2004

Reviews

[Steve · Rating 4 out of 5]

Overall, this is a decent text book on computer security. However, there is some inaccurate and outdated information.

For example, when discussing backup options, RAID arrays are listed as a type of backup. While backing up data to an external array could certainly be used as a back up of local data, this is not specifically mentioned. In addition, the definition of the RAID acronym in the book is wrong. It says the acronym stands for Random Array of Independent Disks. I'm not sure where the authors go the idea the R stands for "Random." The normal definitions I have seen are "Redundant Array of Inexpensive Disks" or "Redundant Array of Independent Disks."

Also, securityfocus.com is listed as a source for current current security information. Unfortunately, the Security Focus mailing lists went away quite a few years ago. The only mailing list left is the bugtraq list.

[Vladimir · Rating 2 out of 5]

Very dry. Text spends so much time elaborating on VERY basic concepts that if it reaches any interesting or useful information, the reader is too checked out to really engage with it. A lot of material is taken directly from sources rather than summarised. This helped the author fill up pages but adds to the dryness of the book. As long as your version is not too out of date, it may be an ok reference book rather than something to read cover to cover.

[ETextBookLib · Rating 4 out of 5]

A practical, well-organized text on information security management. Covers risk assessment, governance frameworks, and the business side of securing systems — the part that pure technical textbooks skip. The 6th edition updates the compliance chapters with the latest regulatory changes. For a low-cost e-copy, eTextBook Lib has it: https://etextbooklib.com/management-o...

[Wave · Rating 2 out of 5]

OMG I can’t believe I finally finished this book (Had to read it for class ugh). Let’s be real it was a total pain in the a$$. I’m just glad it’s over. ;)

[Jan · Rating 3 out of 5]

good

[Erin Garlock · Rating 3 out of 5]

Nice overview book, but not in depth on any topic. The book does serve as a good reference to numerous other resources - a bit of an expensive bibliography though.