Search icon CANCEL
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Conferences
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Information Security Handbook

You're reading from   Information Security Handbook Develop a threat model and incident response strategy to build a strong information security framework

Arrow left icon
Product type Paperback
Published in Dec 2017
Publisher
ISBN-13 9781788478830
Length 330 pages
Edition 1st Edition
Arrow right icon
Author (1):
Arrow left icon
Darren Death Darren Death
Author Profile Icon Darren Death
Darren Death
Arrow right icon
View More author details
Toc

Table of Contents (13) Chapters Close

Preface 1. Information and Data Security Fundamentals FREE CHAPTER 2. Defining the Threat Landscape 3. Preparing for Information and Data Security 4. Information Security Risk Management 5. Developing Your Information and Data Security Plan 6. Continuous Testing and Monitoring 7. Business Continuity/Disaster Recovery Planning 8. Incident Response Planning 9. Developing a Security Operations Center 10. Developing an Information Security Architecture Program 11. Cloud Security Consideration 12. Information and Data Security Best Practices

SDLC considerations for testing


Security testing fits into all parts of the SDLC/SELC and plays a vital role in ensuring the security of the information system, from project initiation until the information system has reached the end of its useful life and it is disposed of.

Project initiation

Conduct analysis of business needs: The information security professional must work closely with the business/mission users and the information technology staff to have a firm grasp of the solution that is required by the business and proposed by IT. This is an opportunity for the information security professional to add value to the project team by providing alternatives and ensuring that a secure proposal is developed.

During this phase, you will typically be conducting solution reviews versus outright technical testing. This is a very important part of the overall project life cycle, since this is where key project decisions are made from a business vision and technical direction perspective. These...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at €18.99/month. Cancel anytime