eBook: IT Infrastructure Risk and Vulnerability Library - Risk Register for IT Assurance Professionals [$65.00]

IT asset risk
core banking app

Terms and Conditions

About The Author


Abstract

Identification, impact assessment, and remediation of Information Systems and IT Infrastructure risks/vulnerabilities (IT Risk, Control and Cyber Security Series)

Using a globally accepted template for vulnerability/risk identification, assessment and remediation plan, IT Infrastructure Risk and Vulnerability Library serves as repository or database of risk and vulnerabilities identified to be inherent or associated with IT infrastructure that are commonly deployed in today’s corporations for delivery of services and business operations that leverage on technology. Intended for organizations that need to either build a risk management program from the ground up or strengthen an existing one, this book provides a unique and rich database of vulnerabilities/risk, control lapses, process failures and substandard practices associated with the following core IT Systems/infrastructure:

  • Email (Exchange Server) and Active Directory (AD) infrastructure.
  • AIX (IBM) Operating System Infrastructure.
  • Core Banking and Enterprise Resource Planning (ERP) Applications.
  • Virtualized Infrastructure.
  • Payment Card Infrastructure (Processes, Systems and Applications).
  • Perimeter Network Infrastructure (Switches, Routers, Perimeter Firewalls, Wireless Controllers, Virtual Private Networks, Special device protection, Network Monitoring).

core banking app

The vulnerabilities were identified from comprehensive risk assessment these infrastructure over time and from experiences of continuous reviews/audit of these systems in big organizations having identified that corporations have consistently been unable to either identify their existence due to skill gaps or mere oversight on the part of responsible personnel. Hence, this book will be relevant to organizations carrying out Risk Assessment of their IT environment (infrastructure and operations), optimizing existing IT risk management and information security programs for value adding and improvement information/technology security management, internal audit and control assurance.

What You Will Learn and Benefit:

  • Build an IT risk/vulnerability register for your organization or expand existing one by selecting from vulnerabilities/risk, control lapses, and substandard practices already identified and documented in this book where applicable.
  • Prepare for and pass such common certification audits as PCI-DSS, ISO 27001, ISO 22301 and ISO 20000.
  • Expanding the scope of your risk assessment to areas, which have not yet be identified as areas of exposure or risk..
  • Strengthen your organization’s internal audit process and control testing, a benefit from an expanded risk/vulnerability register/library.
  • Rejuvenate the information security program of your organization, having an improved perspective of inherent risk/vulnerabilities of IT infrastructure as well as a robust and realistic vulnerability/risk register.
  • Risk mitigate and treatment plan.

Who This Book Is For:

IT professionals moving into the security field; new security managers, directors, project heads, and would-be CISOs; security specialists from other disciplines moving into information security (e.g., former military security professionals, law enforcement professionals, and physical security professionals); and information assurance specialists (e.g. IT Auditors, IT Risk Managers, IT Control implementers, CAEs, CIOs, CTOs, COO) and other IT Support/Operation Professionals.

Review the book sample pages and table of content below. Please note that a link to download the eBook in PDF format will be provided to you upon successful checkout. However, if you want the book in other reading formats such as .ePub, or .kobi, please Contact US and we will email you a copy of the book in the format of your choice on request.


Other eBooks By Nwabueze Ohia

Auditing Your Information Systems and IT infrastructure: Practical Audit Programs/Checklists for Internal AuditorsDownload
Auditing Your Payment Cards Processes, Systems and Applications: A Step By Step PCIDSS Compliance Audit Program For Brands, Issuers, Acquirers, ProcessorsGet Now
Auditing Your Windows Infrastructure, Intranet And Internet Security: A Practical Audit Program for Assurance ProfessionalsGet Now
Customer Review System (WIDGET PACK)
Star Rating (WIDGET PACK)