Risk Analysis and the Security Survey

Rating:
Summary: Review after using Risk Analysis and the Security Survey
Review: I bought the book to use as a reference while doing my very first risk analysis. It helped me a lot with my project. I found it easy to read and use as a reference. I used the format in the book as a guide when writing up the risk analysis I did.

If you haven't done one before and are looking for a good reference guide, this is a great resource.

Rating:
Summary: Review after using Risk Analysis and the Security Survey
Review: I bought the book to use as a reference while doing my very first risk analysis. It helped me a lot with my project. I found it easy to read and use as a reference. I used the format in the book as a guide when writing up the risk analysis I did.

If you haven't done one before and are looking for a good reference guide, this is a great resource.

Rating:
Summary: clear direction on putting together a security survey
Review: I have prepared several security surveys throughout the last couple of years and have always found that they were missing something. Once I started looking through this book I was given clear direction on the useful information required when conducting a security survey.
This book describes all the main sections required for a security review: Scoop of the project, organization assesment and requirements, physical security, internal controls, data system and records, emergency planning, and proprietary information, business impact analysis, survey questionary, etc.
This book goes into details on planning and analysis but does not give detailed techniques on aquireing information or what an effective security system looks like. It assumes the reader has a strong security background and is able to handle the details of investigation, interviewing, testing and evaluation. This book only touches on these topics.