Assessing and Managing Security Risk in IT Systems: A

This book is written to push back the advance of security-as-art and supplant it with a structured methodology that functions independent of technology evolution. The author outlines a simple yet thorough process to guide readers in the analysis and mitigation of risks in IT systems. The handbook contains enough detail to ensure practitioners and policy makers can apply the concepts of the model. Because it does not delve into technical implications, an in-depth technical background is not necessary, although all technical people can work within its structure. Assessing and Managing Security Risk in IT Systems promises to become the most dog-eared possession for anyone charged with security in IT systems.