000			03668cam a2200277 a 4500
008			090818s2007 njua b 001 0 eng
010			_a2006041705
020			_a9780471450566
035			_a(Sirsi) u2290
040			_aEG-CaNU _cEG-CaNU _dEG-CaNU
042			_ancode
082	0	0	_a005.8 _2 22
100	1		_aDhillon, Gurpreet, _d 1963- _94116
245	1	0	_aPrinciples of information systems security : _b text and cases / _c Gurpreet Dhillon.
260			_aHoboken, NJ : _b John Wiley & Sons, _c c2007.
300			_axii, 451 p. : _b ill. ; _c 25 cm.
504			_aIncludes bibliographical references and index.
505	0		_aCh 1: Information System Security: nature and scope -- Technical Aspects of Information System Security -- Ch 2: Security of Technical Systems in Organizations: an introduction -- Ch 3: Designing Technically Secure IS: formal models -- Ch 4: Encryption and Technical IS Security -- Ch 5: Controls and System Development -- Formal Aspects of Information System Security -- Ch 6: Security of Formal Systems in Organizations: an introduction -- Ch 7: Information System Security Management and Policy -- Ch 8: Risk Management for Information System Security -- Ch 9: Monitoring and Audit Control for Information System Security -- Informal Aspects of Information System Security -- Ch 10: Security of Informal Systems in Organizations: an introduction -- Ch 11: Corporate Governance for Information System Security -- Ch 12: Developing an Information System Security Culture -- Regulatory Aspects of Information System Security -- Ch 13: Security Standards and Evaluation Criteria -- Ch 14: Legal Aspects of IS Security - to deal with encryption -- Ch 15: Computer Forensics -- Ch 16: Conclusion -- Cases -- C1: The Case of Password Management in local government -- C2: The Case of client server system implementation and Information System Security -- C3: The Case of Information System Security in Health Care Administration -- C4: Computer crime and the Demise of Barings Bank case -- C5: The Role of IT Systems in the Demise of Drexel Burnham Lambert -- C6: The Case of Security Management at the Tower -- C7: It won't part you hair: the INSLAW Affair -- C8: M&M Procurement Inc.
520			_aThe real threat to information system security comes from people, not computers. That's why students need to understand both the technical implementation of security controls, as well as the softer human behavioral and managerial factors that contribute to the theft and sabotage proprietary data. Addressing both the technical and human side of IS security, Dhillon's Information Systems Security: A Management Challenge equips managers (and those training to be managers) with an understanding of a broad range issues related to information system security management, and specific tools and techniques to support this managerial orientation. Coverage goes well beyond the technical aspects of information system security to address formal controls (the rules and procedures that need to be established for bringing about success of technical controls), as well as informal controls that deal with the normative structures that exist within organizations.
650		0	_aComputer security. _94117
650		0	_aComputer networks _x Security measures. _94118
596			_a1
999			_c1400 _d1400