Information Security Design, Implementation, Measurement, and Compliance

Information Security presents an in-depth perspective of the ISO/IEC 17799 Information Security Standard and provides a detailed analysis of how to effectively measure an information security program using this standard. It includes a qualitative-based risk assessment methodology and describes a quantitative measurement framework that organizations can adopt and implement within the risk assessment process, allowing firms to customize practices to their own needs. This text also includes a comprehensive gap analysis of the recently rescinded standard against the newly released version, making the transition to the new standard much easier for organizations and practitioners.Layton, Timothy P. is the author of 'Information Security Design, Implementation, Measurement, and Compliance', published 2006 under ISBN 9780849370878 and ISBN 0849370876.