Assessing and Managing Security Risk in IT Systems

This book is written to push back the advance of security-as-art and supplant it with a structured methodology that functions independent of technology evolution. The author outlines a simple yet thorough process to guide readers in the analysis and mitigation of risks in IT systems. The handbook contains enough detail to ensure practitioners and policy makers can apply the concepts of the model. Because it does not delve into technical implications, an in-depth technical background is not ne…