000			01982 a2200181 4500
005			20250320145557.0
020			_a9781627342766
082			_a005.8 CAR
100			_aCarlson, Christopher T
245			_aHow to Manage Cybersecurity Risk: A Security Leader's Roadmap with Open FAIR
260			_aIrvine _bBrownWalker Press _c2019
300			_a283
520			_aProtecting information systems to reduce the risk of security incidents is critical for organizations today. This writing provides instruction for security leaders on the processes and techniques for managing a security program. It contains practical information on the breadth of information security topics, referring to many other writings that provide details on technical security topics. This provides foundation for a security program responsive to technology developments and an evolving threat environment. The security leader may be engaged by an organization that is in crisis, where the priority action is to recover from a serious incident. This work offers foundation knowledge for the security leader to immediately apply to the organization's security program while improving it to the next level, organized by development stage: • Reactive--focused on incident detection and response • Planned--control requirements, compliance and reporting • Managed--integrated security business processes The security leader must also communicate with the organization executive, whose focus is on results such as increasing revenues or reducing costs. The security leader may initially be welcomed as the wizard who applies mysterious skills to resolve an embarrassing incident. But the organization executive will lose patience with a perpetual crisis and demand concrete results. This writing explains how to communicate in terms executives understand.
650			_aComputer Security-Standards
650			_aComputer crimes Risk Assessment Standards
650			_aOpen FAIR
942			_2ddc _cBK
999			_c42323 _d42323