TY  - BOOK
AU  - Brass, Michael 
TI  - Governance, Risk and Compliance: Demystifying the Risk and Data Privacy Landscape
SN  - 978-1-032-89671-7
U1  - 005.8 
PY  - 2026///
CY  - Florida
PB  - CRC Press, Taylor and Francis Group
KW  - Computer Science
KW  - Computer Programming
KW  - Computer Security
KW  - Data Security
KW  - Management of Computer Security
N1  - Introduction. Chapter 1: Social sciences and information security: Bridging disciplines to build understanding. Chapter 2: The importance of governance, risk and compliance in modern business. Chapter 3: Business-related security governance and culture. Chapter 4: Building an effective business-aligned security programme. Chapter 5: Introduction to risk management and its role in GRC. Chapter 6: GRC automation. Chapter 7: Data privacy and protection. Chapter 8: The strategic role of enterprise security architecture in governance, risk, and compliance - Robert Campbell. Chapter 9: Developing assurance programmes and controls. Chapter 10: Standards and frameworks. Chapter 11: Exploring career pathways. Chapter 12: Drawing it all together. Bibliography
N2  - This book on Governance, Risk Management and Compliance (GRC) and Data Privacy is designed to equip apprentices, students and professionals across various industries with a deep understanding of this holistic approach to organizational security and risk management, quality management and regulatory responsibilities. It involves aligning a company’s governance structure, quality and risk processes and compliance and data privacy activities to better enable the achievement of the company’s strategic goals. It also looks at what is an Enterprise Security Architecture through the lenses of TOGAF and SABSA, which isn’t about the technical implementation; think of building a house where you get an architect to design it and you ensure the construction is aligned to best practices and your goals.

Whether you are an Information Security or Cybersecurity specialist, a risk management practitioner, or simply seeking to enhance your knowledge in this domain, this book will provide you with the necessary framework and tools to excel in your current or future role. It teaches you the fundamentals of GRC, including what GRC is and why it is important; the key components of GRC; how to implement a GRC program; what Data Privacy is beyond protection; and how to use GRC to improve your company’s performance
ER  -