Thomas R. Peltier provides a structured methodology for identifying and quantifying threats to organizational data assets. The text focuses on the Facilitated Risk Analysis Process (FRAP), a qualitative technique designed to streamline assessments without the exhaustive time requirements of quantitative modeling. Peltier outlines how to categorize system vulnerabilities, determine the probability of exploit occurrence, and calculate the potential business impact. He details specific administrative controls and technical safeguards used to mitigate discovered weaknesses while ensuring compliance with internal security policies and external regulations.
This book is intended for information security officers and business managers who need to justify security expenditures to executive leadership. Readers use these chapters to establish a formal risk management program that aligns IT department goals with corporate financial objectives. By following the provided templates and checklists, practitioners walk away with a repeatable framework for conducting risk assessments that determine which security measures provide the highest return on investment for their specific infrastructure.
Outward-looking, growth-minded and clear-cut; a moderate read.
Best for readers like The Practical Optimizer. Which reader are you?
- Published
- 2001
- Publisher
- CRC Press
- ISBN
- 9781420000092
- Language
- EN
