文档介绍：Security RiskManagementBuilding an InformationSecurity Risk ManagementProgram from the Ground UpSecurity RiskManagementBuilding an InformationSecurity Risk ManagementProgram from the Ground UpEvan WheelerTechnical h SwickAMSTERDAM?BOSTON?HEIDELBERG?LONDONNEW YORK?OXFORD?PARIS?SAN DIEGOSAN FRANCISCO?SINGAPORE?SYDNEY?TOKYOSyngress is an imprint of ElsevierAcquiring Editor:Angelina WardDevelopment Editor:Heather SchererProject Manager:Danielle S. MillerDesigner:Alisa AndreolaSyngressis an imprint of Elsevier225 Wyman Street, Waltham, MA 02451, USA? 2011 Elsevier Inc. All rights part of this publication may be reproduced or transmitted in any form or by any means, electronicor mechanical, including photocopying, recording, or any information storage and retrieval system,without permission in writing from the publisher. Details on how to seek permission, furtherinformation about the Publisher’s permissions policies and our arrangements anizations suchas the Copyright Clearance Center and the Copyright Licensing Agency, can be found at ourwebsite: book and the individual contributions contained in it are protected under copyright by thePublisher (other than as may be noted herein).NoticesKnowledge and best practice in this field are constantly changing. As new research and experience broadenour understanding, changes in research methods or professional practices, may e and researchers must always rely on their own experience and knowledge in evaluating and using anyinformation or methods described herein. In using such information or methods they should be mindful of theirown safety and the safety of others, including parties for whom they have a professional the fullest extent of the law, neither the Publisher nor the authors, contributors, or editors, assume any liabilityfor any injury and/or damage to persons or property as a matter of products liability, negligence or otherwise,or fromany use or operat