Building and Implementing a Security Certification and Accreditation Program: Official (ISC)2 Guide

Description
Whilst this book is not a CAP exam guide, it is the only text currently available to aid studying toward CAP certification.

Program

Building and Implementing a Security Certification and Accreditation Program: Official (ISC)2 Guide to the CAPcm CBKBuilding and Implementing a Security Certification and Accreditation Program: Official (ISC)2 Guide to the CAP CBK demonstrates the practicality and effectiveness of certification and accreditation (C&A) as a risk management methodology for IT systems in both public and private organizations. It provides security professionals with an overview of C&A components, enabling them to document the status of the security controls of their IT systems, and learn how to secure systems via standard, repeatable processes.


This book consists of four main sections. It begins with a description of what it takes to build a certification and accreditation program at the organization level, followed by an analysis of various C&A processes and how they interrelate. The text then provides a case study of the successful implementation of certification and accreditation in a major U.S. government department. It concludes by offering a collection of helpful samples in the appendices.


Overview of the Book:

• Provides a usable approach for top-down implementation of information technology security in an organization, benefiting IS security officers (ISSOs), security managers, certifiers, and developers
• Defines a practical approach to certification and accreditation (C&A) that can be successfully implemented in both public and private organizations
• Clarifies the official guidance that has been published on certification, accreditation, and related processes
• Offers an approach that simplifies the C&A process while still following US federal guidance
• Examines how disparate processes can be combined into a coherent, unified risk management methodology
• Describes current thinking on the topic derived from the author's real-world experience
• Enables the documentation of the status of a system's security controls

Whilst this book is not a CAP exam guide, it is the only text currently available to aid studying toward CAP certification.

Author: Patrick D. Howard
Publisher: (ISC)2 Press
ISBN 10: 0849320623
ISBN 13: 9780849320620
Pages: 344
Format: Hard Cover
Published Date: 15/12/2005
Availability: Ex Stock

Order today for immediate despatch!