Information Technology Governance

Written by an acknowledged expert on the ISO/IEC 27001 standard, ISO 27001: 2022–An Introduction to Information Security and the ISMS Standard is an ideal primer for anyone implementing an information security management system aligned to ISO 27001: 2022.

"Conquer the CISA Exam: Your Guide to Success as a Certified Information Systems Auditor" is an essential resource for anyone aiming to achieve the prestigious CISA certification. This comprehensive guide covers all the critical domains of the CISA exam, including Information Systems Auditing Process, Governance and Management of IT, Information Systems Acquisition, Development and Implementation, Information Systems Operations and Business Resilience, and Protection of Information Assets. The book begins with an overview of the CISA certification and its importance in the field of ...

"Conquer the CISM Exam: Your Guide to Success as a Certified Information Security Manager" is an essential resource for anyone aiming to achieve the prestigious CISM certification. This comprehensive guide covers all critical domains of the CISM exam, including Information Security Governance, Information Risk Management, Information Security Program Development and Management, and Information Security Incident Management. The book begins with an overview of the CISM certification and its importance in the field of information security management. It then delves into each domain in detail, ...

Created for IT service managers, consultants, and other practitioners in IT governance, risk management, and compliance, this practical book discusses all the key concepts of COBIT® 5 and explains how to direct the governance of enterprise IT (GEIT) using the COBIT®5 framework. Drawing on more than 30 years of experience in the IT sector, the author explains the main frameworks and standards supporting GEIT, discusses the ideas of enterprise and governance, and describes the path from corporate governance to the governance of enterprise IT.

Based on insights gained from academic research, as well as interviews with UK-based security professionals from various sectors, The Psychology of Information Security describes how resolving conflicts between security compliance and human behavior explains the importance of careful risk management and how to align a security program with wider business objectives, providing methods and techniques to engage stakeholders and encourage buy-in.

The revised version of this book provides essential guidance, compelling ideas, and unique ways to Enterprise Architects so that they can successfully perform complex enterprise modernisation initiatives transforming from chaos to coherence. This is not an ordinary theory book describing Enterprise Architecture in detail. There are myriad of books on the market and in libraries discussing details of enterprise architecture. My aim here is to highlight success factors and reflect lessons learnt from the field within enterprise modernisation and transformation context. As a practising Senior ...

It is estimated that standard computer-based defense systems catch only 25 percent of malware attacks. Do you know the risks you’re running online? Are you protected? An Introduction to Hacking and Crimeware answers your concerns and provides a foundation-level overview of the dark world of cybercrime. This is a comprehensive guide to more serious online threats. Knowledge of these threats will help you understand how to ensure that your computer systems are protected and make sure that your business is safe, enabling you to focus on your core activities without fear of attack.

A big-picture look at how the latest trends in information management and technology are impacting business models and innovation worldwide.... With all of the recent emphasis on "big data", analytics and visualization, and emerging technology architectures such as smartphone networks, social media, and cloud computing, the way we do business is undergoing rapid change. The right business model can create overnight sensations - think of Groupon, the iPad, or Facebook.

Integrating and managing the services of multiple third-party IT service providers is becoming increasingly popular, but there is no formal best-practice guidance for service integration and management (SIAM). This book provides clear guidance on the SIAM process, answering questions on what service integration is, when SIAM is applicable, and what approach should be taken when sourcing ITSM services in a multi-sourced environment.