Section 3: Operationalizing Information Security
In this final section, we'll implement measures to ensure systems and software are secure, that visibility on security events is maintained, that reactions to security events are adequate, and that processes are continually improved.
This section contains the following chapters:
- Chapter 6, Designing and Managing Security Testing Processes
- Chapter 7, Owning Security Operations
- Chapter 8, Improving the Security of Software