| | |  | Business & Culture | Home » » The Security Risk Assessment Handbook: A Complete Guide for Performing Security Risk Assessments | | | | | | | Description: | | The Security Risk Assessment Handbook: A Complete Guide for Performing Security Risk Assessments provides detailed insight into precisely how to conduct an information security risk assessment. Designed for security professionals and their customers who want a more in-depth understanding of the risk assessment process, this volume contains real-world advice that promotes professional development. It also enables security consumers to better negotiate the scope and rigor of a security assessment, effectively interface with a security assessment team, deliver insightful comments on a draft report, and have a greater understanding of final report recommendations.
This book can save time and money by eliminating guesswork as to what assessment steps to perform, and how to perform them. In addition, the book offers charts, checklists, examples, and templates that speed up data gathering, analysis, and document development. By improving the efficiency of the assessment process, security consultants can deliver a higher-quality service with a larger profit margin.
The text allows consumers to intelligently solicit and review proposals, positioning them to request affordable security risk assessments from quality vendors that meet the needs of their organizations. | | | Product Details: | | | Author:
| Douglas J. Landoll | | Hardcover:
| 504 pages | | Publisher:
| Auerbach Publications | | Publication Date:
| December 12, 2005 | | Language:
| English | | ISBN:
| 0849329981 | | Package Length:
| 9.3 inches | | Package Width:
| 6.3 inches | | Package Height:
| 1.3 inches | | Package Weight:
| 1.8 pounds | | Average Customer Rating:
|  based on 5 reviews |
| | | | Customer Reviews: | |
Average Customer Review:
Write an online review and share your thoughts with other customers.
A must resource in a CISO's libraryMar 30, 2010
Dear Mr. Doug Landoll,
I have to give you Kudo's on your book. I just bought it and its awesome!!!! There is a section that is so well written regarding the reporting structure of security and how successful the program will be based on InfoSec placement and support. I've never seen it written so well before. Your book will be a career long reference. I hope you write more books.
Take care,
Daniel Nunez, CISSP, CISM
5 of 6 found the following review helpful:
Reduce your information risks with this bookAug 20, 2008
I manage information risks for a large organization on a professional basis and this is one of the best books I have read on this important topic. What I found most useful about this book is that it complements rather than competes with formal risk management methods. This book explains techniques and methods that you can use to enhance your existing risk assessment process like data gathering, impact analysis, evaluations and so on. This book should belong on every risk managers bookshelf.
4 of 5 found the following review helpful:
A Great Way to Learn about Threat Risk AnalysisMar 25, 2008
I am taking a class on Threat Risk Assessment and one of our main references is Douglas Landoll's "The Security Risk Assessment Handbook". The great thing about this book is that it takes what would normally be extremely dry material and makes it interesting. The book has a conversational tone which is easy to read, and yet still manages to be very informative. A great tool for anyone who wants to learn about security assessments.
10 of 16 found the following review helpful:
RIIOT in the Streets we have a standard!!!!May 29, 2006
Finally Some one has heard our struggle!! We have a guide that is easily read and solves the blank sheet of paper problem. The book is based in a real world and shows almost step by step the process. The major selling point to me is it serves as a great reference book as well. When you need collection points or industry standards this is the book. Read it and you will not leave for a risk assessment with out it.
2 of 8 found the following review helpful:
The first book to read!May 29, 2006
Very easy to read. Very good details on how the security industry works, no more secrets.
| | |
|
