You're reading from Certified Information Security Manager Exam Prep Guide Aligned with the latest edition of the CISM Review Manual to help you pass the exam with confidence

Product type Paperback

Published in Nov 2021

Publisher Packt

ISBN-13 9781801074100

Length 616 pages

Edition 1st Edition

Concepts

Information Security

Author (1):

Hemang Doshi

Preface

1. Section 1: Information Security Governance

2. Chapter 1: Information Security Governance FREE CHAPTER

3. Chapter 2: Practical Aspects of Information Security Governance

4. Section 2: Information Risk Management

5. Chapter 3: Overview of Information Risk Management

6. Chapter 4: Practical Aspects of Information Risk Management

7. Chapter 5: Procedural Aspects of Information Risk Management

8. Section 3: Information Security Program Development Management

9. Chapter 6: Overview of Information Security Program Development Management

10. Chapter 7: Information Security Infrastructure and Architecture

11. Chapter 8: Practical Aspects of Information Security Program Development Management

12. Chapter 9: Information Security Monitoring Tools and Techniques

13. Section 4: Information Security Incident Management

14. Chapter 10: Overview of Information Security Incident Manager

15. Chapter 11: Practical Aspects of Information Security Incident Management

16. Other Books You May Enjoy

Architecture implementation

The security manager should consider the following important factors during the implementation of the security architecture:

Termination process: An effective employee termination process is one of the most important aspects of the information security process. A terminated employee can misuse their credentials for unauthorized activity. Hence, the termination process should ensure the timely revocation of all access at the time an employee is terminated or otherwise ceases to be employed by the organization.
Security rules: The security manager should also ensure that rules related to security tools, such as firewalls, IDS, anti-malware software, security information and event management (SIEM), and so on, should be reviewed at periodic intervals. Rules should be simple and easy to implement. However, if too many security rules are implemented, they can become difficult to manage, and there is a chance that a particular rule may conflict...

The rest of the chapter is locked