Audit Like a Hacker
This presentation guides you through a security audit from a different perspective – that of a hacker who focuses on "value" among other things.
October 27, 2011
Chapter
Information Security Governance Collection – Page 3
Improving Information Security Compliance
This paper presents a process-oriented approach to manage organizational change needed to improve information security compliance. The approach uses Business Aligned Information Security  anagement (BAISeM) and principles that have been derived from standards like ITIL, CObIT and ISO 27001. In order to illustrate the approach, the context of IT service continuity is selected as an example.
October 11, 2011
A Quick Introduction to Information Security Governance?
This quick introduction to information security governance also covers tips on implementing it successfully.
July 21, 2011
Top Action Steps for Information Security Managers
"This publication is designed for Certified Information Security Managers (CISMs), Chief Information Security Officers (CISOs) and information security managers to use as action steps in addressing the questions posed by the 2001 ITGI publication Information Security Governance: Guidance for Boards of Directors and Executive Management. "
July 21, 2011
A Framework for Information Security and Business Alignment
This presentation discusses a framework for information security and business alignment – the extent to which the ISEC function is integrated into the rest of the business organization
July 21, 2011
What the Board Needs to Know about Information Security Governance
This paper provides an overview of information security governance for the board of directors so "the board can provide a level of needed oversight to this vital business function that is adequate and necessary, and in doing so, exercise its essential duty of care."<br />
<br />
<span style="background-color: rgb(255, 255, 153); ">Dated Material</span>
July 21, 2011
A Framework for Information Security Governance
This paper proposes a preliminary framework for information security governance that builds on the lessons of Federal Information Security Management Act (FISMA) and ISO 17799.
July 21, 2011
Corporate Governance of Information Technology: Making Important Connections
This presentation makes the connection between corporate governance, information technology IT governance, information security governance, and risk management.
March 24, 2011
ITIL V3 and Information Security
This paper discusses the role and importance of effective Information Security Management (ISM), how it is supported by an extensive family of global standards and the way these harmonize with ITIL
March 10, 2011
Developing an Information Technology Risk Management
This in-depth presentation provides a step by step guide to implementing an information technology risk management program
October 28, 2010