Auditing Information and Cyber Security Governance: A Controls-Based Approach

A comprehensive entity security program deploys information asset protection through stratified technological and non-technological controls. Normative decision theory establishes a rational framework for choosing between alternative courses of action when the outcomes are uncertain.

Format: Hardback
Length: 284 pages
Publication date: 23 September 2021
Publisher: Taylor & Francis Ltd

A vital necessity for society in the present era. I fervently hope that this book reaches the information managers within organizations currently at risk of being targeted by hackers who engage in the theft of corporate information and even threaten to hold it hostage for ransom.

A comprehensive enterprise security program employs a multifaceted approach to safeguard information assets by implementing a combination of technological and non-technological controls. These controls serve as essential safeguards against a range of threats, opportunities, and vulnerabilities, effectively mitigating the potential for adverse impacts to be maintained at acceptable levels. This book offers a systematic methodology within the framework of normative decision theory constructs and concepts, with appropriate references to standards and guidelines. Normative decision theory endeavors to establish a rational framework for making choices between alternative courses of action when the outcomes resulting from these selections remain uncertain. Through the application of decision theory techniques, these methodologies can facilitate the determination of objectives, the evaluation of interactions, the estimation of performance, and the analysis of organizations. A normative model outlines what should exist based on an assumption or rule.

Weight: 732g
Dimension: 274 x 263 x 24 (mm)
ISBN-13: 9780367568504