Information security: principles and practices

Fully updated for the newest technologies and best practices, "Information Security: Principles and Practices", Second Edition thoroughly covers all 10 domains of today's Information Security Common Body of Knowledge. Two highly experienced security practitioners have brought together all the foundational knowledge you need to succeed in today's IT and business environments. They offer easy-to-understand, practical coverage of today's topics ranging from security management and physical security to cryptography and application development security. This edition fully addresses new trends that are transforming security, from cloud services to mobile applications, "Bring Your Own Device" (BYOD) strategies to today's increasingly rigorous compliance requirements. Throughout, you'll find updated case studies, review questions, and exercises -- all designed to reveal today's real-world IT security challenges and help you overcome them. -- From publisher's description.

Revised edition of the authors' Information security, c2006.

Includes index.

Chapter 1: Why Study Information Security? -- Chapter 2: Information Security Principles of Success -- Chapter 3: Certification Programs and the Common Body of Knowledge -- Chapter 4: Governance and Risk Management -- Chapter 5: Security Architecture and Design -- Chapter 6: Business Continuity Planning and Disaster Recovery Planning -- Chapter 7: Law, Investigations, and Ethics -- Chapter 8: Physical Security Control -- Chapter 9: Operations Security -- Chapter 10: Access Control Systems and Methodology -- Chapter 11: Cryptography -- Chapter 12: Telecommunications, Network, and Internet Security -- Chapter 13: Software Development Security -- Chapter 14: Securing the Future -- Appendices.