This book is a guide for Network professionals to understand real-world information security scenarios. It offers a systematic approach to prepare for security assessments including process security audits, technical security audits and Penetration tests. This book aims at training preemptive security to network professionals in order to improve their understanding of security infrastructure and policies.

With our network being exposed to a whole plethora of security threats, all technical and non-technical people are expected to be aware of security processes. Every security assessment (technical/ non-technical) leads to new findings and the cycle continues after every audit. This book explains the auditor's process and expectations and also helps an organisation prepare for any type of audit and minimise security findings.

It follows a lifecycle approach to information security by understanding:

Why we need Information security
How we can implement
How to operate securely and maintain a secure posture
How to face audits

Contents

Basics of Information Security
Threat Paradigm
Information Security Controls
Decoding Policies Standards Procedures & Guidelines
Network security design
Know your assets
Implementing Network Security
Secure Change Management
Vulnerability and Risk Management
Access Control
Capacity Management
Log Management
Network Monitoring
Information Security Audit
Technical Compliance Audit
Penetration Testing

Sign up now to get the most out of Books2Read

Discover something great at Books2Read.

Thanks for signing up for Books2Read notifications!