MARC details
| 000 -LEADER |
|---|
| fixed length control field |
03063nam a2200289 i 4500 |
| 003 - CONTROL NUMBER IDENTIFIER |
|---|
| control field |
CSPC |
| 005 - DATE AND TIME OF LATEST TRANSACTION |
|---|
| control field |
20250321133526.0 |
| 008 - FIXED-LENGTH DATA ELEMENTS--GENERAL INFORMATION |
|---|
| fixed length control field |
250320s2022 cau 001 0 eng d |
| 020 ## - INTERNATIONAL STANDARD BOOK NUMBER |
|---|
| International Standard Book Number |
9781484277980 |
| 040 ## - CATALOGING SOURCE |
|---|
| Transcribing agency |
CSPC |
| Original cataloging agency |
CSPC |
| Language of cataloging |
eng |
| Description conventions |
rda |
| 050 04 - LIBRARY OF CONGRESS CALL NUMBER |
|---|
| Classification number |
QA76.9.A25 |
| Item number |
V54 2022 |
| 082 04 - DEWEY DECIMAL CLASSIFICATION NUMBER |
|---|
| Classification number |
005.8 |
| Item number |
V671i |
| Edition number |
23 |
| 100 1# - MAIN ENTRY--PERSONAL NAME |
|---|
| Personal name |
Viegas, Virgilio, |
| Relator term |
author. |
| 245 10 - TITLE STATEMENT |
|---|
| Title |
IT security controls : |
| Remainder of title |
a guide to corporate standards and frameworks / |
| Statement of responsibility, etc. |
Virgilio Viegas and Oben Kuyucu. |
| 264 #1 - PRODUCTION, PUBLICATION, DISTRIBUTION, MANUFACTURE, AND COPYRIGHT NOTICE |
|---|
| Place of production, publication, distribution, manufacture |
Berkeley, California : |
| Name of producer, publisher, distributor, manufacturer |
Apress, |
| Date of production, publication, distribution, manufacture, or copyright notice |
2022. |
| 300 ## - PHYSICAL DESCRIPTION |
|---|
| Extent |
xxi, 354 pages ; |
| Dimensions |
26 cm. |
| 336 ## - CONTENT TYPE |
|---|
| Source |
rdacontent |
| Content type term |
text |
| 337 ## - MEDIA TYPE |
|---|
| Source |
rdamedia |
| Media type term |
unmediated |
| 338 ## - CARRIER TYPE |
|---|
| Source |
rdacarrier |
| Carrier type term |
volume |
| 500 ## - GENERAL NOTE |
|---|
| General note |
Includes index. |
| 505 0# - FORMATTED CONTENTS NOTE |
|---|
| Formatted contents note |
The cybersecurity challenge -- International security standards -- Information security frameworks -- IT security technical controls -- Corporate information security processes and services -- People -- Security metrics -- Case studies -- Security testing and attack simulation tools. |
| 520 ## - SUMMARY, ETC. |
|---|
| Summary, etc. |
Use this reference for IT security practitioners to get an overview of the major standards and frameworks, and a proposed architecture to meet them. The book identifies and describes the necessary controls and processes that must be implemented in order to secure your organization's infrastructure. The book proposes a comprehensive approach to the implementation of IT security controls with an easily understandable graphic implementation proposal to comply with the most relevant market standards (ISO 27001, NIST, PCI-DSS, and COBIT) and a significant number of regulatory frameworks from central banks across the World (European Union, Switzerland, UK, Singapore, Hong Kong, India, Qatar, Kuwait, Saudi Arabia, Oman, etc.). To connect the book with the real world, a number of well-known case studies are featured to explain what went wrong with the biggest hacks of the decade, and which controls should have been in place to prevent them. The book also describes a set of well-known security tools available to support you. What You Will Learn Understand corporate IT security controls, including governance, policies, procedures, and security awareness Know cybersecurity and risk assessment techniques such as penetration testing, red teaming, compliance scans, firewall assurance, and vulnerability scans Understand technical IT security controls for unmanaged and managed devices, and perimeter controls Implement security testing tools such as steganography, vulnerability scanners, session hijacking, intrusion detection, and more Who This Book Is For IT security managers, chief information security officers, information security practitioners, and IT auditors will use the book as a reference and support guide to conduct gap analyses and audits of their organizations' IT security controls implementations |
| 650 #0 - SUBJECT ADDED ENTRY--TOPICAL TERM |
|---|
| Topical term or geographic name entry element |
Computer security. |
| 700 1# - ADDED ENTRY--PERSONAL NAME |
|---|
| Personal name |
Kuyucu, Oben, |
| Relator term |
author. |
| 942 ## - ADDED ENTRY ELEMENTS (KOHA) |
|---|
| Source of classification or shelving scheme |
Dewey Decimal Classification |
| Suppress in OPAC |
No |
| Koha item type |
Books |
| Classification part |
005.8 |
| Item part |
V671i |
| Call number prefix |
CIR |
| Call number suffix |
2022 |
| Edition |
23 |