Compliance, Part II: Risk Abatement, Strengthening Justification and Documenting the Security Process
Titre: Compliance, Part II: Risk Abatement, Strengthening Justification and Documenting the Security Process
Date de diffusion: 18/09/2006
Vendor: Internet Security Systems
Catégorie(s) :
Mise en conformité - Compliance
Taille: 1.22 Mo. (application/pdf)
Langue: 
Description: Government regulation encourages companies to take a top-down assessment of the information security risks to their enterprise. Once risks are identified, the companies inevitably question how they can best protect against those risks. ISO 17799 provides some guidance by indicating that protection strategy starts with risk assessment and ends with a set of security requirements.
