Download - Bernan

Information Technology41Risk ManagementThe Open Group GuideVan Haren PublishingThis book brings together The Open Group’s setof publications addressing risk management,which have been developed and approved byThe Open Group. It is presented in three parts:Part 1: Technical Standard for RiskTaxonomy provides a standard definition andtaxonomy for information security risk, as wellas information regarding how to use the taxonomy.The intended audience for this Part includes anyone who needs tounderstand and/or analyze a risk condition.Part 2: Technical Guide: Requirements for Risk AssessmentMethodologies identifies and describes the key characteristics that makeup any effective risk assessment methodology, thus providing a commonset of criteria for evaluating any given risk assessment methodologyagainst a clearly defined common set of essential requirements. In thisway, it explains what features to look for when evaluating the capabilitiesof any given methodology, and the value those features represent.Part 3: Technical Guide: FAIR – ISO/IEC 27005 Cookbookdescribes in detail how to apply the FAIR (Factor Analysis for InformationRisk) methodology to any selected risk management framework. It usesISO/IEC 27005 as the example risk assessment framework. FAIR iscomplementary to all other risk assessment models/frameworks, includingCOSO, ITIL, ISO/IEC 27002, COBIT, OCTAVE, etc.May 2011.Paperback.ISBN: 9789087536633 $58.00The Chief Information Security OfficerInsights, tools and survival skillsIT Governance PublishingDiscover the skills you need to be a successful CISO in today’s changingworld! The role of the Chief Information Security Officer has evolved enormouslyin recent years in response to security threats and a challengingbusiness environment. Instead of being primarily a master technician,today’s CISO has to be a trusted advisor to senior management. Read thispocket guide and …• Learn how the role of a CISO has changed.Today’s CISO must be integrated into all aspects of the businessand have a full understanding of its strategy and objectives.• Understand the importance of a risk management methodology.A good risk management methodology must take into accountthe special information security needs of the company as wellas legal and regulatory requirements.• Learn how to establish a successful ISMS.The guide explains how to design and implement an ISMS thatis appropriate for the organization. It also describes the keymanagement system processes that should be included in an ISMS.2010 – 2011 Conference ScheduleBernan exhibits at many professionalconferences during the year.Meet our friendly marketing staffand see our latest books, catalogsand special offers.Special Libraries Association (SLA)2011 Annual Conference and INFO-EXPO12 - 15 June | Philadelphia, PAPennsylvania Convention CenterAmerican Library Association (ALA)2011 Annual Conference & Exposition23 - 28 June | New Orleans, LAErnest N. Morial Convention CenterAmerican Association of Law Libraries (AALL)2011 Annual Meeting and Conference23 - 26 July | Philadelphia, PAPennsylvania Convention CenterAmerican Libraries Association (ALA)2012 Midwinter Meeting and Exhibits20 - 24 January 2012 | Dallas, TXDallas Convention CenterPublic Library Association (PLA)2012 National Conference13 – 17 March 2012 | Philadelphia, PAPennsylvania Convention CenterChief Information Security Officers are bombarded with huge challengesevery day, from recommending security applications to strategic thinkingand business innovation. This guide describes the hard and soft skillsthat a successful CISO requires: not just a good knowledge of informationsecurity, but also attributes such as flexibility and communication skills.April 2011. 74p. Paperback.ISBN: 9781849281829 $14.95www.bernan.com • Order by Phone: 800-865-3457 • Fax: 800-865-3450