IT securiteers - The human and technical dimension working for the organisation. Current corporate governance regulations and international standards lead many organisations, big and small, to the creation of an information technology (IT) security function in their organisational chart or to the acquisition of services from the IT security industry. More often than desired, these teams are only useful for companiesa executives to tick the corresponding box in a certification process, be it ISO, ITIL, PCI, etc. Many IT security teams do not provide business value to their company. They fail to really protect the organisation from the increasing number of threats targeting its information systems. IT Security Management provides an insight into how to create and grow a team of passionate IT security professionals. We will call them asecuriteersa. They will add value to the business, improving the information security stance of organisations.Two typical fields of application for this principle are: Accounting procedures, where the party spending the budget is different to the ... 10See the ablue teama in Section 4.10 and RBAC model summary in http://en.wikipedia.org/wiki/ Rbac.
|Title||:||IT Security Management|
|Author||:||Alberto Partida, Diego Andina|
|Publisher||:||Springer Science & Business Media - 2010-06-08|