Describing OCTAVE (Operationally Critical Threat, Asset and Vulnerability Evaluation), a method of evaluating information security risk, this text should be of interest to risk managers.

Ideal for risk managers, information security managers, lead implementers, compliance managers and consultants, as well as providing useful background material for auditors, this book will enable readers to develop an ISO 27001-compliant risk assessment framework for their organisation and deliver real, bottom-line business benefits.

Drawing on international best practice, including ISO/IEC 27005, NIST SP800-30 and BS7799-3, the book explains in practical detail how to carry out an information security risk assessment. It covers key topics, such as risk scales, threats and vulnerabilities, selection of controls, and roles and responsibilities, and includes advice on choosing risk assessment software.

This textbook provides a concise introduction to Management Information Systems. It introduces core concepts in an accessible style and adopts a contemporary approach that reflects the opportunities and challenges faced as businesses and technologies continue to evolve. Key features: · Coverage of key issues including sustainability and green IT, ethics and privacy, smart technologies, corporate social responsibility and big data · Definition boxes to consolidate understanding of key terms · Illustrative examples to engage and apply theory in the real-world · Pause for thought boxes to check understanding and encourage reflection · End of chapter case studies to illustrate key topics in practice, encourage critical thinking, application of knowledge and enhance learning · Comprehensive online support including PowerPoints, tutor’s guide and testbank of questions This textbook is suitable for undergraduate and postgraduate students studying introductory Management or Business Information Systems courses with no prior knowledge. Dr Tomayess Issa is a Senior Lecturer at Curtin University, Australia. Dr Theodora Issa is a Senior Lecturer at Curtin University, Australia. Dr Sarita Hardin-Ramanan is Head Faculty of IT at Curtin University, Mauritius. Dr Bilal Abu Salih is a Associate Professor at The University of Jordan, Jordan. Dr Lydia Maketo is a Lecturer at Curtin University, Australia. Dr Rohini Balapumi is a Lecturer at Curtin University, Australia. Dr S. Zaung Nau is a Lecturer at Curtin University, Australia. Dr Raadila Hajee Ahmud-Boodoo is a Teaching Instructor at Curtin University, Australia.

This book provides a comprehensive conceptualization of perceived IT security risk in the Cloud Computing context that is based on six distinct risk dimensions grounded on a structured literature review, Q-sorting, expert interviews, and analysis of data collected from 356 organizations. Additionally, the effects of security risks on negative and positive attitudinal evaluations in IT executives' Cloud Computing adoption decisions are examined. The book’s second part presents a mathematical risk quantification framework that can be used to support the IT risk management process of Cloud Computing users. The results support the risk management processes of (potential) adopters, and enable providers to develop targeted strategies to mitigate risks perceived as crucial.​

FISMA and the Risk Management Framework: The New Practice of Federal Cyber Security deals with the Federal Information Security Management Act (FISMA), a law that provides the framework for securing information systems and managing risk associated with information resources in federal government agencies. Comprised of 17 chapters, the book explains the FISMA legislation and its provisions, strengths and limitations, as well as the expectations and obligations of federal agencies subject to FISMA. It also discusses the processes and activities necessary to implement effective information security management following the passage of FISMA, and it describes the National Institute of Standards and Technology's Risk Management Framework. The book looks at how information assurance, risk management, and information systems security is practiced in federal government agencies; the three primary documents that make up the security authorization package: system security plan, security assessment report, and plan of action and milestones; and federal information security-management requirements and initiatives not explicitly covered by FISMA. This book will be helpful to security officers, risk managers, system owners, IT managers, contractors, consultants, service providers, and others involved in securing, managing, or overseeing federal information systems, as well as the mission functions and business processes supported by those systems. - Learn how to build a robust, near real-time risk management system and comply with FISMA - Discover the changes to FISMA compliance and beyond - Gain your systems the authorization they need

Revised edition of: Information security for managers.

This work adds a new perspective to the stream of organizational IT security risk management literature, one that sheds light on the importance of IT security risk perceptions. Based on a large-scale empirical study of Cloud providers located in North America, the study reveals that in many cases, the providers’ decision makers significantly underestimate their services’ IT security risk exposure, which inhibits the implementation of necessary safeguarding measures. The work also demonstrates that even though the prevalence of IT security risk concerns in Cloud adoption is widely recognized, providers only pay very limited attention to the concerns expressed by customers, which not only causes serious disagreements with the customers but also considerably inhibits the adoption of the services.

Supply chains are experiencing a seismic shift towards customer-centricity and sustainability and the challenges that are bound to arise will require innovative solutions. The escalating complexities of logistics, exacerbated by the profound impacts of the pandemic, underscore the urgency for a paradigm shift. Every industry is grappling with unprecedented disruptions from shortages in essential components to workforce deficits. Navigating Cyber Threats and Cybersecurity in the Logistics Industry serves as a beacon of insight and solutions in this transformative landscape. This groundbreaking book, a result of an in-depth study evaluating 901 startups and scale-ups globally, delves into the Top Logistics Industry Trends & Startups. It unveils the pivotal role of the Insights Discovery Platform, powered by Big Data and Artificial Intelligence, covering over 2 million startups and scale-ups worldwide. This platform offers an immediate and comprehensive assessment of innovations, facilitating the early identification of startups and scale-ups that hold the key to revolutionizing logistics.