Table of Contents

1 Risk Concepts
2 Threats and Vulnerabilities in the Enterprise
3 Identifying and Managing Risk Scenarios
4 Risk Assessment and Analysis
5 Risk Response and Mitigation
6 Control and Risk Monitoring
7 Information Systems Control Concepts
8 Designing Information Systems Controls
9 Implementing Information Systems Controls
10 Measuring Risk and Control Effectiveness
Glossary
Appendix A The NIST Risk Management Framework
Appendix B The ISACA Risk IT Framework

About the Author

Bobby E. Rogers is an information security engineer working as a contractor for Department of Defense agencies, and has secured networks all over the world.

Dawn Dunkerley, Ph.D., received a Ph.D. in Information Systems from Nova Southeastern University in 2011. Her research interests include cyber warfare, cybersecurity, and the success and measurement of organizational cybersecurity initiatives.