Information Security Management Handbook, Volume 4

ACCESS CONTROL Access Control Administration

TELECOMMUNICATIONS AND NETWORK SECURITY Communications and Network Security

Network Attacks and Countermeasures

INFORMATION SECURITY AND RISK MANAGEMENT Security Management Concepts and Principles

Policies, Standards, Procedures, and Guidelines

Risk Management

APPLICATION SECURITY System Development Controls

CRYPTOGRAPHY Crypto Concepts, Methodologies, and Practices

SECURITY ARCHITECTURE AND DESIGN Principles of Computer and Network Organizations, Architectures, and Designs

OPERATIONS SECURITY Operations Controls

BUSINESS CONTINUITY PLANNING AND DISASTER RECOVERY PLANNING Business Continuity Planning

LAW, REGULATIONS, COMPLIANCE, AND INVESTIGATION Major Categories of Computer Crime

Incident Handling

PHYSICAL SECURITY Elements of Physical Security