Building and Implementing a Security Certification and Accreditation Program: OFFICIAL (ISC)2 GUIDE to the CAPcm CBK

Patrick D. Howard

December 15, 2005 by Auerbach Publications
Reference - 344 Pages - 5 B/W Illustrations
ISBN 9780849320620 - CAT# AU2062
Series: (ISC)2 Press

This product is not available
FREE Standard Shipping!

Features

  • Provides a usable approach for top-down implementation of information technology security in an organization, benefiting IS security officers (ISSOs), security managers, certifiers, and developers
  • Defines a practical approach to certification and accreditation (C&A) that can be successfully implemented in both public and private organizations
  • Clarifies the official guidance that has been published on certification, accreditation, and related processes
  • Offers an approach that simplifies the C&A process while still following federal guidance
  • Examines how disparate processes can be combined into a coherent, unified risk management methodology
  • Describes current thinking on the topic derived from the author’s real-world experience
  • Enables the documentation of the status of a system’s security controls
  • Summary

      Building and Implementing a Security Certification and Accreditation Program: Official (ISC)2 Guide to the CAP CBK demonstrates the practicality and effectiveness of certification and accreditation (C&A) as a risk management methodology for IT systems in both public and private organizations. It provides security professionals with an overview of C&A components, enabling them to document the status of the security controls of their IT systems, and learn how to secure systems via standard, repeatable processes.

     This book consists of four main sections. It begins with a description of what it takes to build a certification and accreditation program at the organization level, followed by an analysis of various C&A processes and how they interrelate. The text then provides a case study of the successful implementation of certification and accreditation in a major U.S. government department. It concludes by offering a collection of helpful samples in the appendices.