The Business-Oriented CIO: A Guide to Market-Driven Management | by George Tillmann | ISBN: 9780470278123. IT Strategy and Planning. IT Governance. IT Portfolio Management. Customer Management. Market Intelligence. Service-Offering Management. IT Performance Management

January 30, 2010 by kutenk · 9 Comments
Filed under: Business Books, Computer Books 

The Business-Oriented CIO: A Guide to Market-Driven Management

by George Tillmann
ISBN:9780470278123

Applying some of the best for-profit business thinking for use by CIOs and IT managers, this book discusses how to run your IT department like a business rather than a reactive entity that only functions to fix problems.

Get this Book by clicking below:

Get Book Now

The Business-Oriented CIO—A Guide to Market-Driven Management









Preface
Overview
Firsthand Experience
Diverse IT Audience
The Desired Result
Notes

Part One – The Fundamentals
Chapter 1 – In Search of Overhead Heroes

Overview
The Problem
The IT Solution
What The For-Profits Can Teach IT
Some Additional Thoughts
Notes

Chapter 2 – IT Governance
Overview
The Problem
The IT Solution
What the For-Profits Can Teach IT
Some Additional Thoughts
Notes
References
Some Representative Literature
Some Helpful Organizations and Web Sites

Chapter 3 – IT Strategy and Planning
Overview
The Problem
The IT Solution
What the For-Profits Can Teach IT
Some Additional Thoughts
Note
References
Some Representative Literature
Some Helpful Organizations and Web Sites

Chapter 4 – Portfolio Management
Overview
The Problem
The IT Solution
What the For-Profits Can Teach IT
Some Additional Thoughts
Notes
References
Some Representative Literature
Some Helpful Organizations and Web Sites





Part Two – Learning from the Best
Chapter 5 – Customer Management

Overview
The Problem
The IT Solution
What the For-Profits can Teach IT
Some Additional Thoughts
Notes
References
Some Representative Literature




Chapter 6 – Market Intelligence
Overview
The Problem
The IT Solution
What the For-Profits Can Teach IT
Some Additional Thoughts
References

Chapter 7 – Service-Offering Management
Overview
The Problem
The IT Solution
What the For-Profits Can Teach IT
Some Additional Thoughts
Notes
References
Some Representative Literature

Chapter 8 – Performance Management
Overview
The Problem
The IT Solution
What the For-Profits Can Teach IT
Some Additional Thoughts
Note
References
Some Representative Literature
Some Helpful Organizations and Web Sites



Part Three – Pushing the Envelope
Chapter 9 – Organizational Competencies

Overview
The Problem
The IT Solution
What the For-Profits Can Teach IT
Some Additional Thoughts
Notes
References
Some Representative Literature

Chapter 10 – In Search of Customer Service
Overview
Do What I Say, Not What I Do
A New Look at Service
Service Economy versus Service Mentality
Do You Want Courtesy with That?
Notes
References
Some Helpful Organizations and Web Sites



Chapter 11 – Local Heroes
Overview
Achieving Market-Driven Management
First Steps First
A Final Thought
Notes
References



For 1000+ more Computer Books & IT Management Books, click below:

Computer Books
Business & Management Books
Science & Engineering Books

The Executive MBA in Information Security | by John J. Trinckes, Jr. | 2010 | ISBN: 9781439810071. Information Security Management. IT Audit and Compliance. Effective Information Security Program. Administrative Controls. Technical Controls. Application Controls. Perimeter Controls

January 30, 2010 by kutenk · 2 Comments
Filed under: Computer Books 

The Executive MBA in Information Security

by John J. Trinckes, Jr.
2010 (350 pages)
ISBN:9781439810071

Allowing for quick and easy reference, this time-saving manual provides those in key leadership positions with a lucid understanding of what it takes to develop a rock-solid information security management program that is as flexible as it is secure.

Get this Book by clicking below:

Get Book Now

The Executive MBA in Information Security









Preface
Chapter 1 – Information Security Overview
Objectives
1.1: Information Security Management
1.2: What Is Information Security?
1.3: Ideal Traits of an Information Security Professional
1.4: Why Is Information Security Important?
1.5: Information Security Concepts
1.6: Laws of Security
1.7: Summary
References

Chapter 2 – Information Security Requirements
Objectives
2.1: Interrelationship of Regulations, Policies, Standards, Procedures, and Guidelines
2.2: Regulations
2.3: Common Elements of Compliance
2.4: Security Controls
2.5: Control Objectives for Information and Related Technology (COBIT)
2.6: ISO 27002 Overview
2.7: Capability Maturity Model (CMM)
2.8: Generally Accepted Information Security Principles (GAISP)
2.9: Common Pitfalls of an Effective Information Security Program
2.10: Defense in Depth
2.11: Summary
References

Chapter 3 – Managing Risks
Objectives
3.1: Risk Management
3.2: Technical Evaluation Plan (TEP)
3.3: Follow-Up
3.4: Tracking
3.5: Conflict Resolution
3.6: Test Plans
3.7: Summary
Reference

Chapter 4 – Physical Security
Objectives
4.1: Access Control Systems and Methods
4.2: Physical Security
4.3: Social Engineering
4.4: Summary
References

Chapter 5 – Business Continuity Plans and Disaster Recovery
Objectives
5.1: Business Continuity
5.2: Disaster Recovery
5.3: Business Continuity Planning and Disaster Recovery Training
5.4: Summary
Reference

Chapter 6 – Administrative Controls
Objectives
6.1: Change Management
6.2: Computer Forensics
6.3: Incident Management
6.4: Laws, Investigations, and Ethics
6.5: Operations Security
6.6: Records Retention
6.7: Security Awareness Training
6.8: Security Management Practices
6.9: Service Providers, Service-Level Agreements, and Vendor Reviews
6.10: Managing Security Risks in Vendor Relationships*
6.11: Summary
References





Chapter 7 – Technical Controls
Objectives
7.1: Host Security
7.2: Malware Protection
7.3: Multimedia Devices
7.4: Network Security
7.5: Passwords
7.6: Patch or Vulnerability Management
7.7: Summary
Reference




Chapter 8 – Application Controls
Objectives
8.1: Application and System Development
8.2: e-Mail
8.3: Encryption
8.4: Multifactor Authentication
8.5: Summary
References

Chapter 9 – Perimeter Controls
Objectives
9.1: Security Architecture
9.2: Telecommunications Security
9.3: Voice over IP Security
9.4: Virtual Private Network
9.5: Wireless Security
9.6: Web Filtering
9.7: Summary

Chapter 10 – Audit and Compliance
Objectives
10.1: Audit and Compliance
10.2: Information Security Governance Metrics
10.3: Testing—Vulnerability Assessment
10.4: Summary



Appendix A – Information Security Policy
A.1 Purpose
A.2 Objectives
A.3 Responsibilities
A.4 Security Processes
A.5 Portable Devices
A.6 Logs and Systems Security Tools
A.7 Security Information Management
A.8 e-Mail and Computer Use
A.9 Backups
A.10 Networking
A.11 Physical Security

Appendix B – Technology Resource Policy*
B.1 Purpose
B.2 Definitions
B.3 Policy



Appendix C – Log-on Warning Banner
Appendix D – Penetration Test Waiver

D.1 Objective
D.2 Scope of Work
D.3 Special Considerations
D.4 Approvals

Appendix E – Tools
Appendix F – How to Report Internet Crime*

F.1 International Organizations
F.2 United States
F.3 Well-Known Government Reporting Agencies
F.4 Scams
F.5 Europe
F.6 Italy
F.7 United Kingdom
F.8 Australia
F.9 Canada



Acronyms
MyISAT
Overview
Synopsis of MyISAT
Policies and Procedures (PP) Module
Prerisk-Assessment (PRA) or Change Management (CM) Module
Information Security Risk Assessment (ISRA)
Mitigation of Information Security Risks (MISR) Module
Vendor Management (VM) Module
Business Impact Analysis (BIA) and Business Continuity (BC)/Disaster Recovery Plan (DRP) Module

Web References
Overview
CISSP Related Links
CBK Domains

For 1000+ more Computer Books & Information Security Books, click below:

Computer Books
Business & Management Books
Science & Engineering Books

Next Page »