Managing the Human Factor in Information Security: How to win over staff and influence business managers - Softcover

Lacey, David

Softcover

ISBN 10: 0470721995 ISBN 13: 9780470721995

Publisher: Wiley, 2009

Synopsis

With the growth in social networking and the potential for larger and larger breaches of sensitive data,it is vital for all enterprises to ensure that computer users adhere to corporate policy and project staff design secure systems. Written by a security expert with more than 25 years' experience, this book examines how fundamental staff awareness is to establishing security and addresses such challenges as containing threats, managing politics, developing programs, and getting a business to buy into a security plan. Illustrated with real-world examples throughout, this is a must-have guide for security and IT professionals.

About this title

About the Author

David Lacey is a leading authority on Information Security management with more than 25 years professional experience, gained in senior leadership roles in Royal Dutch/Shell Group, Royal Mail Group and the British Foreign & Commonwealth Office. David is now a freelance director, researcher, writer and a consultant to organisations, venture capitalists and technology companies. He also writes a leading blog on IT Security for Computer Weekly, the largest circulation UK technology magazine.

From the Back Cover

"Computers do not commit crimes. People do."

The biggest threat to information security is the "human factor", the influence of people. Even the best people will make mistakes, cause breaches and create security weaknesses that enable criminals to steal, corrupt or manipulate systems and data. The explosion in social networking and mobile computing is intensifying this problem.

For the first time, this book brings together theories and methods which will help you to change and harness people's security behaviour. It will help you to:

• Understand and manage major crises and risk
• Appreciate the nature of the insider threat
• Navigate organization culture and politics
• Build better awareness programmes
• Transform user attitudes and behaviour
• Gain Executive Board buy-in
• Design management systems that really work
• Harness the power of your organization

Based on the author's own personal experience of working with large, complex organizations, such as Shell and Royal Mail, this book is written by an information security insider and makes essential reading for all information security professionals.

"We live in an age where social networks, collaborative working and community development are global and commonplace, redefining the role of information security. David takes a dry-as-dust elephant of a subject and expertly serves it up in edible, even tasty, morsels."
JP Rangaswami, Managing Director of BT Design

"A highly entertaining read that will undoubtedly become essential reading for all security professionals."
Professor Fred Piper

"I'm really interested in reading this book and, frankly, once it's published, I'll be one of the first to buy it."
Dr. Eugene Schultz, High Tower Software

From the Inside Flap

"Computers do not commit crimes. People do."

The biggest threat to information security is the "human factor", the influence of people. Even the best people will make mistakes, cause breaches and create security weaknesses that enable criminals to steal, corrupt or manipulate systems and data. The explosion in social networking and mobile computing is intensifying this problem.

For the first time, this book brings together theories and methods which will help you to change and harness people's security behaviour. It will help you to:

• Understand and manage major crises and risk
• Appreciate the nature of the insider threat
• Navigate organization culture and politics
• Build better awareness programmes
• Transform user attitudes and behaviour
• Gain Executive Board buy-in
• Design management systems that really work
• Harness the power of your organization

Based on the author's own personal experience of working with large, complex organizations, such as Shell and Royal Mail, this book is written by an information security insider and makes essential reading for all information security professionals.

"We live in an age where social networks, collaborative working and community development are global and commonplace, redefining the role of information security. David takes a dry-as-dust elephant of a subject and expertly serves it up in edible, even tasty, morsels."
JP Rangaswami, Managing Director of BT Design

"A highly entertaining read that will undoubtedly become essential reading for all security professionals."
Professor Fred Piper

"I'm really interested in reading this book and, frankly, once it's published, I'll be one of the first to buy it."
Dr. Eugene Schultz, High Tower Software

Edition details

• Publisher: Wiley
• Publication date: 2009
• Language: English
• ISBN 10: 0470721995
• ISBN 13: 9780470721995
• Binding: Paperback
• Edition number: 1
• Number of pages: 398