Information security management : concepts and practice

part SECTION I: INTRODUCTION -- chapter 1 Introduction to Information Security Management -- chapter 2 Introduction to Management Concepts -- chapter 3 The Information Security Life Cycle -- part SECTION II: SECURITY PLAN -- chapter 4 Security Plan -- chapter 5 Security Policy -- chapter 6 Business Continuity Planning -- part SECTION III: SECURITY ANALYSIS -- chapter 7 Security Risk Management -- chapter 8 Continual Security: Integrated Fault-Event Analysis and Response Framework (IFEAR) -- chapter 9 Active Security Assessment -- chapter 10 System Availability -- part SECTION IV: SECURITY DESIGN -- chapter 11 Nominal Security Enhancement Design Based on ISO/IEC 27002 -- chapter 12 Technical Security Enhancement Based on ISO/IEC 27001 -- part SECTION V: SECURITY IMPLEMENTATION -- chapter 13 Security Solutions -- chapter 14 The Common Criteria -- part SECTION VI: SECURITY REVIEW -- chapter 15 Security Review through Security Audit -- chapter 16 Privacy Rights, Information Technology, and HIPAA -- part SECTION VII: CONTINUAL SECURITY -- chapter 17 The Sarbanes–Oxley Act and IT Compliance -- chapter 18 Cyberterrorism and Homeland Security.