راهنمای مدیریت امنیت اطلاعات، جلد ۴ ۲۰۱۰
Information Security Management Handbook, Volume 4 2010

1. Front cover

2. Contents

3. Preface

4. Editors

5. Domain 1: ACCESS CONTROL

6. Chapter 1: Back to the Future

7. Domain 2: TELECOMMUNICATIONS AND NETWORK SECURITY

8. Chapter 2: Adaptive Threats and Defenses

9. Chapter 3: Achieving a Global Information Systems Transformation (GIST):Foundations for Infrastructure2.0 via Standards-BasedInteroperability:IF-MAP and Beyond

10. Chapter 4: A Primer on Demystifying U.S. Government Networks

11. Network Attacks andCountermeasures

12. Chapter 5: Antispam: Bayesian Filtering

13. Domain 3: INFORMATION SECURITY AND RISKMANAGEMENT

14. Chapter 6: Measuring InformationSecurity and Privacy Trainingand Awareness Effectiveness

15. Chapter 7: Managing MobileDevice Security

16. Chapter 8: Establishing an Information Security Program for Local Government

17. Policies, Standards,Procedures, and Guidelines

18. Chapter 9: A Business Case for ISO27001 Certification

19. ChapterChapter 10: Achieving PCIDSS Compliance: A Compliance Review

20. Risk Management

21. Chapter 11: Leveraging IT Control Frameworks for Compliance

22. Chapter 12: Rats in the Cellar and Batsin the Attic, “Not Enough Depth to My Security”

23. Chapter 13: The Outsourcing of IT:Seeing the Big Picture

24. Chapter 14: Understanding Information Risk Management

25. Chapter 15: The Sarbanes–Oxley Revolution: Heroor Hindrance?

26. Domain APPLICATION SECURITY

27. Chapter 16: Data Loss Prevention Program

28. Chapter 17: Data Reliability: Trusted Time Stamps

29. Chapter 18: Security in the .NET Framework

30. Domain 5: CRYPTOGRAPHY

31. Chapter 19: Cryptography:A Unifying Principle in Compliance Programs

32. Domain 6:SECURITY ARCHITECTURE AND DESIGN

33. Chapter 20: Best Practices in Virtualization Security

34. Chapter 21: Everything New Is Old Again

35. Domain 7: OPERATIONS SECURITY

36. Chapter 22: A Brief Summary of Warfare and Commercial Entities

37. Chapter 23: Information Destruction Requirements and Techniques

38. Domain 8: BUSINESS CONTINUITY PLANNING AND DISASTER RECOVERY PLANNING

39. Chapter 24: Integrated Business Continuity Planning

40. Chapter 25: CERT/BERT: Community and Business Emergency Response

41. Domain 9: LAW, REGULATIONS, COMPLIANCE,AND INVESTIGATION

42. Chapter 26: Cyberstalking

43. Incident Handling

44. Chapter 27: Is Software Write Blockinga Viable Alternative to Hardware Write Blocking in Computer Forensics?

45. Domain 10: PHYSICAL SECURITY

46. Chapter 28: Protection of Sensitive Data

47. Chapter 29: Water Leakage and Flooding

48. Chapter 30: Site Selection and Facility Design Considerations

49. Chapter 31: An Overview of IP-Based Video Surveillance

50. Index

51. Body

52. Back cover