معماری امنیت اطلاعات: رویکرد یکپارچه به امنیت در سازمان، ویرایش دوم ۲۰۰۶
Information Security Architecture: An Integrated Approach to Security in the Organization, Second Edition 2006

1. Front Cover

2. Dedication

3. Contents

4. Preface

5. Executive Summary

6. About the Author

7. Chapter 1. Information Security Architecture

8. Chapter 2. Security Organization /Infrastructure

9. Chapter 3. Security Policies, Standards, and Procedures

10. Chapter 4. Security Baselines and Risk Assessments

11. Chapter 5. Security Awareness and Training Program

12. Chapter 6. Compliance

13. Chapter 7. Pitfalls to an Effective ISA Program

14. Chapter 8. Computer Incident /Emergency Response

15. Chapter 9. Conclusion

16. Appendix A-1. Information Security Policy

17. Appendix A-2. Information Security Policy Acknowledgment Form

18. Appendix A-3. Network Computing Policy

19. Appendix A-4. E-Mail Security Policy

20. Appendix A-5. Internet Policy

21. Appendix A-6. Security Lists

22. Appendix A-7. Security Standards and Procedures Manual Table of Contents

23. Appendix A-8. Anti-Virus Update Procedure

24. Appendix B-1. Security Assessment Workplan

25. Appendix B-2. Application Security Assessment

26. Appendix B-3. Network Security Assessment Workplan

27. Appendix B-4. Windows NT Assessment Workplan

28. Appendix B-5. Telecommunications Security Assessment Workplan

29. Appendix C-1. Computer Incident/Emergency Response Plan

30. Appendix C-2. Sample Line of Business Security Plan

31. Appendix D. Intrusion Checklist

32. Back Cover