Enterprise Information Security: Information Security For Non-technical Decision Makers

Information security has existed as a formal discipline since the mainframe era. Infosec, as it is sometimes called, has evolved over time and has spawned a number of formal methodologies. Universities and corporate research and development have developed several security models that have been used as a design basis for access control and trust mechanisms. Written in user-friendly terms, but using a vocabulary that security practitioners also understand, this briefing will enable the reader to get to grips with security issues so they can make informed decisions on threats and risks facing their business. Contents Security is on center stage, Threats and Vulnerabilities, Security Fundamentals - The Principles and the Mechanisms Behind Them, Security Policies and Requirements - Defining the Standard of Architecture and Behavior, Security is About People's Behavior, Protecting Corporate Information Beyond the Corporate Boundaries, Privacy, Action Items.