Risk Management Guide for Information Technology Systems, and Underlying Technical Models for Info. Technology Security

An effective risk mgmt. (RM) process is an important component of a successful info. technology (IT) program. The principal goal of an org's. RM process is to protect the org. & its ability to perform their mission, not just its IT assets. Here, the 1st report provides a foundation for the development of an effective RM program, containing both the definitions & the practical guidance necessary for assessing & mitigating risks identified within IT systems. The 2nd report provides a description of the tech. foundations, termed models,Ó that underlie secure IT. Provides the models that must be considered in the design & development of tech. security capabilities. These models encompass lessons learned, good practices, & specific tech. considerations. Tables.Stoneburner, Gary is the author of 'Risk Management Guide for Information Technology Systems, and Underlying Technical Models for Info. Technology Security' with ISBN 9780756731908 and ISBN 0756731909.