Computer Security Handbook

Features

• Cover Type: Paperback with 1224 pages
• Published by: Wiley
• Edition: 4th Edition April 11, 2002
• Written in: English
• ISBN 10 Number: 0471412589
• ISBN 13 Number: 978-0471412588
• Book Dimensions: 9.9 x 7 x 2.2 inches
• Weighs: 4.5 pounds

Product Description
This is the most comprehensive book on computer security on the market, with 23 chapters and 29 Appendices covering virtually all aspects of computer security.

• Chapters are contributed by recognized experts in the industry.
• This title has come to be known as "Big Blue" in industry circles and has a reputation for being the reference for computer security issues.

Book Info
Provides the definitive formula for computer security, from power outages to theft and sabotage. Fourth edition continues a long tradition of maintaining highly regarded industry guidelines for detecting virtually every possible threat to your system and prescribes specific actions you can take to eliminate them. Softcover.

Reader Reviews
This book is an anthology of carefully selected papers by experts in their respective knowledge areas. The organization of the papers is consistent with the basic principle of security - layered security in depth, and covers management responsibility, basic safeguards, and physical and technical protection, and special issues. What makes this book such a valuable reference is the care with which the editors chose topics. Each topic area is a critical success factor to implementing and managing an effective security posture, and I especially like the inclusion of papers on "Policies, Standards and Procedures" and "Legal Issues in Computer Security" in the section devoted to Management Responsibility. The paper on risk management in this section is also excellent. The section on basic safeguards actually goes beyond the domain of IS security by addressing disaster recovery (this discipline is independent of IS security, but is closely related), and cross functional topics, such as auditing and application controls. These topics are the core of IS security and I was pleased to see them included in the form of exceptionally well written, in-depth papers. Other highlights, in my opinion, are "Security of Computer Data, Records, and Forms" (an often overlooked, but critical element of IS security), and "Outside Services". Both of these papers show the width and depth of the topics covered in this excellent book. If you are an IS security manager this book is an essential desk reference, and it is also useful to anyone managing production support and service delivery functions, or tasked with vendor management. In my opinion this is one of the best IS security references available and I highly recommend it.