Normal view MARC view ISBD view

Auditing Information and Cyber Security Governance: A Controls-Based Approach / (Record no. 45045)

MARC details
000 -LEADER
fixed length control field	07102nam a22002537a 4500
003 - CONTROL NUMBER IDENTIFIER
control field	OSt
005 - DATE AND TIME OF LATEST TRANSACTION
control field	20260824084002.0
008 - FIXED-LENGTH DATA ELEMENTS--GENERAL INFORMATION
fixed length control field	260824b \|\|\|\|\|\|\|\| \|\|\|\| 00\| 0 eng d
020 ## - INTERNATIONAL STANDARD BOOK NUMBER
International Standard Book Number	978-1-032-04448-4
040 ## - CATALOGING SOURCE
Transcribing agency	AKCL
082 ## - DEWEY DECIMAL CLASSIFICATION NUMBER
Classification number	005.8
Item number	DAV-A
100 ## - MAIN ENTRY--PERSONAL NAME
Personal name	Davis, Robert E.
245 ## - TITLE STATEMENT
Title	Auditing Information and Cyber Security Governance: A Controls-Based Approach /
Statement of responsibility, etc.	Robert E. Davis
260 ## - PUBLICATION, DISTRIBUTION, ETC.
Place of publication, distribution, etc.	Florida:
Name of publisher, distributor, etc.	CRC Press, Taylor and Francis Group,
Date of publication, distribution, etc.	2021
300 ## - PHYSICAL DESCRIPTION
Extent	p. XIV,284
520 ## - SUMMARY, ETC.
Summary, etc.	"A much-needed service for society today. I hope this book reaches information managers in the organization now vulnerable to hacks that are stealing corporate information and even holding it hostage for ransom."<br/><br/>– Ronald W. Hull, author, poet, and former professor and university administrator<br/><br/>A comprehensive entity security program deploys information asset protection through stratified technological and non-technological controls. Controls are necessary for counteracting threats, opportunities, and vulnerabilities risks in a manner that reduces potential adverse effects to defined, acceptable levels. This book presents a methodological approach in the context of normative decision theory constructs and concepts with appropriate reference to standards and the respective guidelines. Normative decision theory attempts to establish a rational framework for choosing between alternative courses of action when the outcomes resulting from the selection are uncertain. Through the methodological application, decision theory techniques can provide objectives determination, interaction assessments, performance estimates, and organizational analysis. A normative model prescribes what should exist according to an assumption or rule.
650 ## - SUBJECT ADDED ENTRY--TOPICAL TERM
Topical term or geographic name entry element	Computer Science
650 ## - SUBJECT ADDED ENTRY--TOPICAL TERM
Topical term or geographic name entry element	Data Security
650 ## - SUBJECT ADDED ENTRY--TOPICAL TERM
Topical term or geographic name entry element	Computer Security
650 ## - SUBJECT ADDED ENTRY--TOPICAL TERM
Topical term or geographic name entry element	Information Technology Auditing
942 ## - ADDED ENTRY ELEMENTS (KOHA)
Koha item type	Books
505 ## - FORMATTED CONTENTS NOTE
Formatted contents note	Contents<br/><br/>Security Governance <br/><br/>Abstract <br/><br/>Introduction <br/><br/>Governance Perspectives <br/><br/>Rational Management <br/><br/>Applied Technology <br/><br/>Security Program Evolution <br/><br/>Information Security Infrastructure Management <br/><br/>Information Security Service Management <br/><br/>Information Security Governance <br/><br/>Framing Governance <br/><br/>Tier One Governance <br/><br/>Tier Two Governance <br/><br/>Tier Three Governance <br/><br/>Security Governance Fusion <br/><br/>Cyber Security Service Delivery for IT <br/><br/>Cyber Security Service Support for IT <br/><br/>Security Governance Insights <br/><br/>Formal Authority <br/><br/>Interpersonal Roles <br/><br/>Informational Roles <br/><br/>Decisional Roles <br/><br/>References <br/><br/>Recommended Reading <br/><br/>Security Governance Environment <br/><br/>Abstract <br/><br/>Introduction <br/><br/>Entity Centric Considerations <br/><br/>Entity Control Environment <br/><br/>Domain Convergence Effects <br/><br/>Entity Risk Determinants <br/><br/>Legal Issues <br/><br/>Managerial Practices <br/><br/>Control Inscriptions <br/><br/>Technology Deployments <br/><br/>References <br/><br/>Recommended Reading <br/><br/>Security Governance Management <br/><br/>Abstract <br/><br/>Introduction <br/><br/>Planning <br/><br/>Security Risk Assessment <br/><br/>Control Objectives Selection <br/><br/>Control Goals Selection <br/><br/>Organizing <br/><br/>Orchestrating <br/><br/>Directing <br/><br/>Controlling <br/><br/>References <br/><br/>Recommended Reading <br/><br/>Appendix: Information Protection Classifications with Criteria and Definitions <br/><br/>Security Governance Processes <br/><br/>Abstract <br/><br/>Introduction <br/><br/>Framing Information Security Governance <br/><br/>Tier Four Strategic Alignment <br/><br/>Tier Four Value Delivery <br/><br/>Tier Four Risk Management <br/><br/>Tier Four Resource Management <br/><br/>Tier Four Performance Measurement <br/><br/>References <br/><br/>Recommended Reading <br/><br/>Appendix: Control Evaluation Worksheets <br/><br/>Control Evaluation Worksheets 1a: Single Risk Ratings <br/><br/>Control Evaluation Worksheets 1b: Single Risk Ratings <br/><br/>Control Evaluation Worksheets 2a: Group Risk Ratings <br/><br/>Control Evaluation Worksheets 2b: Group Risk Ratings <br/><br/>Control Evaluation Worksheets 3: Summary Risk Sheet <br/><br/>Organizational Employees <br/><br/>Abstract <br/><br/>Introduction <br/><br/>Responsibility Delegation <br/><br/>Access Controls <br/><br/>Power Granting <br/><br/>Workplace Irregularities and Illegal Acts <br/><br/>IT Incident Response Team <br/><br/>Education, Training, and Awareness <br/><br/>IT Audit Team <br/><br/>Planning Activities <br/><br/>Study and Evaluation Activities <br/><br/>Testing Activities <br/><br/>Reporting Activities <br/><br/>Follow-up Activities <br/><br/>References <br/><br/>Recommended Reading <br/><br/>External Organizational Actors <br/><br/>Abstract <br/><br/>Introduction <br/><br/>Supply Chain Partners <br/><br/>Information Sharing <br/><br/>Knowledge Sharing <br/><br/>Supply Chain Logistics <br/><br/>Managed Service Providers <br/><br/>Service Provider Audit <br/><br/>IT Audit Planning <br/><br/>IT Audit Study and Evaluation of Controls <br/><br/>IT Audit Testing of Controls <br/><br/>IT Audit Report on Controls <br/><br/>IT Audit Follow-up <br/><br/>References <br/><br/>Recommended Reading <br/><br/>Information Security Governance Audit <br/><br/>Abstract <br/><br/>Introduction <br/><br/>ISG Audit Planning Process <br/><br/>Control Assessment <br/><br/>Audit Risk Assessment <br/><br/>ISG Audit Study and Evaluation of Controls <br/><br/>Information Security Strategic Alignment <br/><br/>Information Security Value Delivery <br/><br/>Information Security Risk Management <br/><br/>Information Security Resource Management <br/><br/>Information Security Performance Management and Measurement <br/><br/>Other Auditable Information Security Units <br/><br/>ISG Audit Testing and Evaluation of Controls <br/><br/>Information Security Compliance Testing <br/><br/>Information Security Substantive Testing <br/><br/>Information Security Evidence Assessment <br/><br/>ISG Audit Control Reporting <br/><br/>Degree of Correspondence <br/><br/>Engagement Report Structuring <br/><br/>ISG Audit Follow-up <br/><br/>ISG Audit Follow-up Responsibilities <br/><br/>General ISG Audit Follow-up Activities <br/><br/>References <br/><br/>Recommended Reading <br/><br/>Appendix A: Control Environment Characteristics – Internal Policies Matrix <br/><br/>Appendix B: Entity Culture – Audit Area Personnel Matrix <br/><br/>Appendix C: ISG Audit Risk Assessment Template <br/><br/>Appendix D: Testing Methodology Options Table <br/><br/>Appendix E: Sampling Selection Options Table <br/><br/>Cyber Security Governance Audit <br/><br/>Abstract <br/><br/>Introduction <br/><br/>CSG Audit Planning Process <br/><br/>Control Assessment <br/><br/>Audit Risk Assessment <br/><br/>CSG Audit Study and Evaluation of Controls <br/><br/>Cybersecurity Access Management <br/><br/>Cybersecurity Network Infrastructure <br/><br/>Cybersecurity Risk Analysis <br/><br/>Cybersecurity Environmental Controls <br/><br/>Cybersecurity Confidential Information Assets <br/><br/>CSG Audit Testing and Evaluation of Controls <br/><br/>Cybersecurity Compliance Testing <br/><br/>Cybersecurity Substantive Testing <br/><br/>Cybersecurity Evidence Assessment <br/><br/>CSG Audit Control Reporting <br/><br/>Degree of Correspondence <br/><br/>Engagement Report Structuring <br/><br/>CSG Audit Follow-up <br/><br/>CSG Audit Follow-up Responsibilities <br/><br/>General CSG Audit Follow-up Activities <br/><br/>References <br/><br/>Recommended Reading <br/><br/>Appendix A: CSG Audit Risk Assessment Template <br/><br/>Appendix B: IAP Functions or Duties Templates <br/><br/>Appendix C: IAP Control Classification Template
942 ## - ADDED ENTRY ELEMENTS (KOHA)
Source of classification or shelving scheme	Dewey Decimal Classification
Suppress in OPAC	No

Holdings
Withdrawn status	Lost status	Source of classification or shelving scheme	Damaged status	Not for loan	Home library	Current library	Date acquired	Serial Enumeration / chronology	Total Checkouts	Full call number	Barcode	Date last seen	Price effective from	Koha item type
		Dewey Decimal Classification			ARCHBISHOP KAVUKATTU CENTRAL LIBRARY	ARCHBISHOP KAVUKATTU CENTRAL LIBRARY	08/24/2026	6185.91 - Pound 47.99		005.8 DAV-A	69375	08/24/2026	08/24/2026	Books