Information security management handbook. Vol.6 / edited by by Harold F. Tipton, Micki Krause Nozaki.

Includes bibliographical references and index.

Updated annually, the Information Security Management Handbook, Sixth Edition, Volume 6 is the most comprehensive and up-to-date reference available on information security and assurance. Bringing together the knowledge, skills, techniques, and tools required of IT security professionals, it facilitates the up-to-date understanding required to stay one step ahead of evolving threats, standards, and regulations. Reporting on the latest developments in information security and recent changes to the (ISC)2® CISSP Common Body of Knowledge (CBK®), this volume features new information on advanced persistent threats, HIPAA requirements, social networks, virtualization, and SOA. Its comprehensive coverage touches on all the key areas IT security professionals need to know, including: {u2022}Access Control: Technologies and administration including the requirements of current laws. {u2022}Telecommunications and Network Security: Addressing the Internet, intranet, and extranet. {u2022}Information Security and Risk Management: Organizational culture, preparing for a security audit, and the risks of social media. {u2022}Application Security: Ever-present malware threats and building security into the development process. {u2022}Security Architecture and Design: Principles of design including zones of trust. {u2022}Cryptography: Elliptic curve cryptosystems, format-preserving encryption. {u2022}Operations Security: Event analysis. {u2022}Business Continuity and Disaster Recovery Planning: Business continuity in the cloud. {u2022}Legal, Regulations, Compliance, and Investigation: Persistent threats and incident response in the virtual realm. {u2022}Physical Security: Essential aspects of physical security The ubiquitous nature of computers and networks will always provide the opportunity and means to do harm. This edition updates its popular predecessors with the information you need to address the vulnerabilities created by recent innovations such as cloud computing, mobile banking, digital wallets, and near-field communications.