Role Engineering for Enterprise Security Management (Information Security & Privacy) - Hardcover

Edward J. Coyne; John M. Davis

 
9781596932180: Role Engineering for Enterprise Security Management (Information Security & Privacy)

Synopsis

Role engineering secures information systems. It ensures that every user has the right permission to access just the right information, computers, and networks. When hundred or thousands of computer users must be assigned their own individual access permission, role engineering saves significant time and money while protecting data and systems. This first-of-its-kind book illustrates the entire role engineering process, from project planning to deployment and verification. In addition to explaining technical aspects, the book emphasizes business benefits by showing how to manage risks and costs. Practitioners get proven techniques that define roles and ensure proper assignment of permissions and roles to users. The book also shows how to verify that roles comply with security policies.

"synopsis" may belong to another edition of this title.

About the Author

Edward J. Coyne is a senior security engineer at Science Applications International Corporation in Vienna, Virginia. Among his many professional activities, he is a member of Health Level 7's Security and CCOW Technical committees, chair of the Role-Based Access Control Task Group of the International Committee for Information Technology Standards, and a senior member of the IEEE. He earned a Ph.D. degree in theoretical linguistics from Georgetown University and an M.A. in linguistics from the American University.

John M. Davis is a security architect for the US Department of Veterans Affairs in Encintas, California. He is a voting member of the International Committee for Information Technology Standards and co-chairs both Health Level 7's Security Technical Committee and Privilege Management Infrastructure Subcommittee for the ASTM Committee E31 on Healthcare Informatics. He holds an M.S. in physics and electronics engineering.

"About this title" may belong to another edition of this title.