The Business-Oriented CIO: A Guide to Market-Driven Management | by George Tillmann | ISBN: 9780470278123. IT Strategy and Planning. IT Governance. IT Portfolio Management. Customer Management. Market Intelligence. Service-Offering Management. IT Performance Management
The Business-Oriented CIO: A Guide to Market-Driven Management
by George Tillmann
ISBN:9780470278123
Applying some of the best for-profit business thinking for use by CIOs and IT managers, this book discusses how to run your IT department like a business rather than a reactive entity that only functions to fix problems.
Get this Book by clicking below:
![]() |
The Business-Oriented CIO—A Guide to Market-Driven Management
Preface
Overview
Firsthand Experience
Diverse IT Audience
The Desired Result
Notes
Part One – The Fundamentals
Chapter 1 – In Search of Overhead Heroes
Overview
The Problem
The IT Solution
What The For-Profits Can Teach IT
Some Additional Thoughts
Notes
Chapter 2 – IT Governance
Overview
The Problem
The IT Solution
What the For-Profits Can Teach IT
Some Additional Thoughts
Notes
References
Some Representative Literature
Some Helpful Organizations and Web Sites
Chapter 3 – IT Strategy and Planning
Overview
The Problem
The IT Solution
What the For-Profits Can Teach IT
Some Additional Thoughts
Note
References
Some Representative Literature
Some Helpful Organizations and Web Sites
Chapter 4 – Portfolio Management
Overview
The Problem
The IT Solution
What the For-Profits Can Teach IT
Some Additional Thoughts
Notes
References
Some Representative Literature
Some Helpful Organizations and Web Sites
Part Two – Learning from the Best
Chapter 5 – Customer Management
Overview
The Problem
The IT Solution
What the For-Profits can Teach IT
Some Additional Thoughts
Notes
References
Some Representative Literature
Chapter 6 – Market Intelligence
Overview
The Problem
The IT Solution
What the For-Profits Can Teach IT
Some Additional Thoughts
References
Chapter 7 – Service-Offering Management
Overview
The Problem
The IT Solution
What the For-Profits Can Teach IT
Some Additional Thoughts
Notes
References
Some Representative Literature
Chapter 8 – Performance Management
Overview
The Problem
The IT Solution
What the For-Profits Can Teach IT
Some Additional Thoughts
Note
References
Some Representative Literature
Some Helpful Organizations and Web Sites
Part Three – Pushing the Envelope
Chapter 9 – Organizational Competencies
Overview
The Problem
The IT Solution
What the For-Profits Can Teach IT
Some Additional Thoughts
Notes
References
Some Representative Literature
Chapter 10 – In Search of Customer Service
Overview
Do What I Say, Not What I Do
A New Look at Service
Service Economy versus Service Mentality
Do You Want Courtesy with That?
Notes
References
Some Helpful Organizations and Web Sites
Chapter 11 – Local Heroes
Overview
Achieving Market-Driven Management
First Steps First
A Final Thought
Notes
References
For 1000+ more Computer Books & IT Management Books, click below:



The Executive MBA in Information Security | by John J. Trinckes, Jr. | 2010 | ISBN: 9781439810071. Information Security Management. IT Audit and Compliance. Effective Information Security Program. Administrative Controls. Technical Controls. Application Controls. Perimeter Controls
The Executive MBA in Information Security
by John J. Trinckes, Jr.
2010 (350 pages)
ISBN:9781439810071
Allowing for quick and easy reference, this time-saving manual provides those in key leadership positions with a lucid understanding of what it takes to develop a rock-solid information security management program that is as flexible as it is secure.
Get this Book by clicking below:
![]() |
The Executive MBA in Information Security
Preface
Chapter 1 – Information Security Overview
Objectives
1.1: Information Security Management
1.2: What Is Information Security?
1.3: Ideal Traits of an Information Security Professional
1.4: Why Is Information Security Important?
1.5: Information Security Concepts
1.6: Laws of Security
1.7: Summary
References
Chapter 2 – Information Security Requirements
Objectives
2.1: Interrelationship of Regulations, Policies, Standards, Procedures, and Guidelines
2.2: Regulations
2.3: Common Elements of Compliance
2.4: Security Controls
2.5: Control Objectives for Information and Related Technology (COBIT)
2.6: ISO 27002 Overview
2.7: Capability Maturity Model (CMM)
2.8: Generally Accepted Information Security Principles (GAISP)
2.9: Common Pitfalls of an Effective Information Security Program
2.10: Defense in Depth
2.11: Summary
References
Chapter 3 – Managing Risks
Objectives
3.1: Risk Management
3.2: Technical Evaluation Plan (TEP)
3.3: Follow-Up
3.4: Tracking
3.5: Conflict Resolution
3.6: Test Plans
3.7: Summary
Reference
Chapter 4 – Physical Security
Objectives
4.1: Access Control Systems and Methods
4.2: Physical Security
4.3: Social Engineering
4.4: Summary
References
Chapter 5 – Business Continuity Plans and Disaster Recovery
Objectives
5.1: Business Continuity
5.2: Disaster Recovery
5.3: Business Continuity Planning and Disaster Recovery Training
5.4: Summary
Reference
Chapter 6 – Administrative Controls
Objectives
6.1: Change Management
6.2: Computer Forensics
6.3: Incident Management
6.4: Laws, Investigations, and Ethics
6.5: Operations Security
6.6: Records Retention
6.7: Security Awareness Training
6.8: Security Management Practices
6.9: Service Providers, Service-Level Agreements, and Vendor Reviews
6.10: Managing Security Risks in Vendor Relationships*
6.11: Summary
References
Chapter 7 – Technical Controls
Objectives
7.1: Host Security
7.2: Malware Protection
7.3: Multimedia Devices
7.4: Network Security
7.5: Passwords
7.6: Patch or Vulnerability Management
7.7: Summary
Reference
Chapter 8 – Application Controls
Objectives
8.1: Application and System Development
8.2: e-Mail
8.3: Encryption
8.4: Multifactor Authentication
8.5: Summary
References
Chapter 9 – Perimeter Controls
Objectives
9.1: Security Architecture
9.2: Telecommunications Security
9.3: Voice over IP Security
9.4: Virtual Private Network
9.5: Wireless Security
9.6: Web Filtering
9.7: Summary
Chapter 10 – Audit and Compliance
Objectives
10.1: Audit and Compliance
10.2: Information Security Governance Metrics
10.3: Testing—Vulnerability Assessment
10.4: Summary
Appendix A – Information Security Policy
A.1 Purpose
A.2 Objectives
A.3 Responsibilities
A.4 Security Processes
A.5 Portable Devices
A.6 Logs and Systems Security Tools
A.7 Security Information Management
A.8 e-Mail and Computer Use
A.9 Backups
A.10 Networking
A.11 Physical Security
Appendix B – Technology Resource Policy*
B.1 Purpose
B.2 Definitions
B.3 Policy
Appendix C – Log-on Warning Banner
Appendix D – Penetration Test Waiver
D.1 Objective
D.2 Scope of Work
D.3 Special Considerations
D.4 Approvals
Appendix E – Tools
Appendix F – How to Report Internet Crime*
F.1 International Organizations
F.2 United States
F.3 Well-Known Government Reporting Agencies
F.4 Scams
F.5 Europe
F.6 Italy
F.7 United Kingdom
F.8 Australia
F.9 Canada
Acronyms
MyISAT
Overview
Synopsis of MyISAT
Policies and Procedures (PP) Module
Prerisk-Assessment (PRA) or Change Management (CM) Module
Information Security Risk Assessment (ISRA)
Mitigation of Information Security Risks (MISR) Module
Vendor Management (VM) Module
Business Impact Analysis (BIA) and Business Continuity (BC)/Disaster Recovery Plan (DRP) Module
Web References
Overview
CISSP Related Links
CBK Domains
For 1000+ more Computer Books & Information Security Books, click below:








