Information security management standards: Compliance, governance and risk management

Information Security Technical Report

Volumn 13, Issue 4, 2008, Pages 247-255

  Humphreys, Edward ^a  

^a XiSEC   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

INDUSTRIAL MANAGEMENT; RISK ANALYSIS; RISK MANAGEMENT; SECURITY SYSTEMS; SOCIETIES AND INSTITUTIONS; STANDARDS;

INFORMATION SECURITIES; INFORMATION SECURITY MANAGEMENTS; INSIDER THREATS; INTERNATIONAL STANDARDS; ISO/IEC; IT SECURITIES; SECURITY MANAGEMENTS; TECHNICAL EXPERTS;

REGULATORY COMPLIANCE;

EID: 57649090183     PISSN: 13634127     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.istr.2008.10.010     Document Type: Article

References (8)

1. Information security: protecting your business assets, BERR, Available from: www.berr.gov.uk.
2. Botha RA, Eloff JHP. Separation of duties for access control enforcement in workflow environments.
3. Federal Trade Commission, Pretexting: your personal information revealed.
4. Humphreys E., and Plate A. ISMS risk management (2008), BSI Publications
5. Humphreys E. Implementing the ISO/IEC 27001 information security management system standard (2007), Artech Press
6. IoD (Institute of Directors) publication, Information security: best practice for protecting your business.
7. ISMS risk management (2008), ISO/IEC 27005
8. Mitnick K. CSEPS course workbook (2004), Mitnick Security Publishing p.4