 | A Comprehensive Guide to Information Security Management and Audit Subjects: Computer Science; Engineering & Technology; Algorithms & Complexity; Computation; Computer Engineering; Information & Communication Technology (ICT); Electrical & Electronic Engineering; Communication Technology; Computer & Software Engineering; Electrical Engineering Communications; Communications & Information Processing; Electronics; The text is written to provide readers with a comprehensive study of information security and management system, audit planning and preparation, audit techniques and collecting evidence, international information security (ISO) standard 27001, and asset management. It further discusses important topics such as security mechanisms, security standards, audit principles, audit competence and evaluation methods, and the principles of asset management. It will serve as an ideal reference text for senior undergraduate, graduate students, and researchers in fields including electrical engineering, electronics and communications engineering, computer engineering, and information technology. The book explores information security concepts and applications from an organizational information perspective and explains the process of audit planning and preparation. It further demonstrates audit techniques and collecting evidence to write important documentation by following the ISO 27001 standards. The book: Elaborates on the application of confidentiality, integrity, and availability (CIA) in the area of audit planning and preparation Covers topics such as managing business assets, agreements on how to deal with business assets, and media handling Demonstrates audit techniques and collects evidence to write the important documentation by following the ISO 27001 standards Explains how the organization's assets are managed by asset management, and access control policies Presents seven case studiesBanoth Rajkumar, B.Tech, M.Tech & Ph.D, Associate Professor, Marwadi University, Rajkot, India. IEEE senior members, Cyber Security Operations Certified Trainer, Published six text books comprising domains Networking, Computer Organization and Architecture and Computer Forensic, Published eighteen Hi-indexed SCI and Scopus Journals and Presented nine Conference papers. Along with having membership in "The Institution of Engineers (India)" and so on. Gugulothu Narsimha, B.Tech, M.Tech, PhD, Currently working as a Vice Principal & Professor in Department of Computer Science and Engineering at JNTUH College of Engineering Sultanpur, Telangana, India. An applauded academician and researcher possessing 22 years of experience in teaching, research and administration in well-reputed educational institutions majorly in state universities JNTU-Kakinada and JNTU-Hyderabad alongside private institutions. Godishala Arunakranthi, B.Tech, M.Tech, Research Scholar, Brunei University Darussalam, Brunei.Pursued Bachelor of Technology in Computer Science and Engineering and Master of Technology in Software Engineering from Jawaharlal Nehru Technological University, Hyderabad. |
