Information technology risk management in enterprise environments : a review of industry practices and a practical guide to risk management teams - Kouns, Jake; Minoli, Daniel, 1952- (Hoboken, N.J. : Wiley, 2010)
Information security risk management imperatives and opportunities -- Information security risk management defined -- Information security risk management standards -- A survey of available information security risk management methods and tools -- Methodologies examples : COBIT and OCTAVE -- Risk management issues and organization specifics -- Assessing organization and establishing risk management scope -- Identifying resources and implementing the risk management team -- Identifying assets and organization risk exposures -- Remediation planning and compliance reporting
Includes bibliographical references and index
Keywords: Business enterprises -- Computer networks -- Security measures; Information technology -- Security measures; Data protection; Computer security; Risk management