Information Security Management Handbook, Volume 4

Updated annually, the Information Security Management Handbook is the single most comprehensive resource on information security and assurance. Reflecting the latest changes to the CISSP® Common Body of Knowledge (CBK®), this volume updates the benchmark Volume 1 with a wealth of new information on mobile device security, adaptive threat defense, Web 2.0, virtualization, data leakage, and governance. New material also addresses risk management, business continuity planning, disaster recovery planning, and cryptography. The handbook is also available in a CD-ROM version, which contains the complete contents of Volumes 1, 2, 3, and 4 as well as an extra volume's worth of information-including chapters from other security and networking books that have never appeared in the print editions.

Harold F. Tipton, HFT Associates, Villa Park, California, USA Micki Krause Nozaki, Pacific Life Insurance Company, Newport Beach, California, USA

Access Control. Access Control Techniques. Access Control Administration. Methods of Attack. Telecommunications & Network Security. Communications & Network Security. Internet, Intranet, Extranet Security. Network Attacks & Countermeasures. Information Security & Risk Management. Security Management Concepts & Principles. Policies, Standards, Procedures & Guidelines. Risk Management. Security Management Planning. Employment Policies & Practices. Application Security. Application Issues. System Development Controls. Malicious Code. Methods of Attack. Cryptography. Crypto Concepts, Methodologies & Practices. Security Architecture & Design. Principles of Computer & Network Organizations, Architectures & Designs. Operations Security. Operations Controls. Resource Protection Requirements. Business Continuity Planning & Disaster Recovery Planning. Business Continuity Planning. Disaster Recovery Planning. Legal, Regulations, Compliance & Investigation. Information Law. Major Categories of Computer Crime. Incident Handling. Physical Security. Elements of Physical Security.