Table of Contents

• Chapter 1: Why Study Information Security?
• Chapter 2: Information Security Principles of Success
• Chapter 3: Certification Programs and the Common Body of Knowledge
• Chapter 4: Governance and Risk Management
• Chapter 5: Security Architecture and Design
• Chapter 6: Business Continuity Planning and Disaster Recovery Planning
• Chapter 7: Law, Investigations, and Ethics
• Chapter 8: Physical Security Control
• Chapter 9: Operations Security
• Chapter 10: Access Control Systems and Methodology
• Chapter 11: Cryptography
• Chapter 12: Telecommunications, Network, and Internet Security
• Chapter 13: Software Development Security
• Chapter 14: Securing the Future
• Appendix A: Common Body of Knowledge
• Appendix B: Security Policy and Standards Taxonomy
• Appendix C: Sample Policies
• Appendix D: HIPAA Security Rule Standards

About the Author

Mark Merkow, CISSP, CISM, CSSLP, is a technical director for a Fortune 100 financial services firm, where he works on implementing and operating a software security practice for the enterprise. He has more than 35 years of IT experience, including 20 years in IT security. Mark has worked in a variety of roles, including applications development, systems analysis and design, security engineering, and security management. Mark holds a master’s degree in decision and info systems from Arizona State University (ASU), a master’s of education in Distance Learning from ASU, and a bachelor’s degree in Computer Info Systems from ASU.

Jim Breithaupt is a data integrity manager for a major bank, where he manages risk for a large data mart. He has more than 30 years of data processing experience and has co-authored several other books on information systems and information security, along with Mark Merkow.