Autorentext

Dr Michael Brass is a senior information security leader with 25 years of experience of Information Security, Cybersecurity and IT within the technology, manufacturing, charity, financial and public Arms Length Bodies sectors in the UK. He has a proven track record of delivering innovative and practical solutions that are business-focused and pragmatic, driving digital transformation efforts. Visit his website at www.risk-specialist.com and his LinkedIn profile at https://www.linkedin.com/in/drmikebrass.

Klappentext

This book on Governance, Risk Management and Compliance (GRC) and Data Privacy is designed to equip apprentices, students and professionals across various industries with a deep understanding of this holistic approach to organizational security and risk management, quality management and regulatory responsibilities. It involves aligning a company's governance structure, quality and risk processes and compliance and data privacy activities to better enable the achievement of the company's strategic goals. It also looks at what is an Enterprise Security Architecture through the lenses of TOGAF and SABSA, which isn't about the technical implementation; think of building a house where you get an architect to design it and you ensure the construction is aligned to best practices and your goals.

Whether you are an Information Security or Cybersecurity specialist, a risk management practitioner, or simply seeking to enhance your knowledge in this domain, this book will provide you with the necessary framework and tools to excel in your current or future role. It teaches you the fundamentals of GRC, including what GRC is and why it is important; the key components of GRC; how to implement a GRC program; what Data Privacy is beyond protection; and how to use GRC to improve your company's performance.

Inhalt

Introduction. Chapter 1: Social sciences and information security: Bridging disciplines to build understanding. Chapter 2: The importance of governance, risk and compliance in modern business. Chapter 3: Business-related security governance and culture. Chapter 4: Building an effective business-aligned security programme. Chapter 5: Introduction to risk management and its role in GRC. Chapter 6: GRC automation. Chapter 7: Data privacy and protection. Chapter 8: The strategic role of enterprise security architecture in governance, risk, and compliance - Robert Campbell. Chapter 9: Developing assurance programmes and controls. Chapter 10: Standards and frameworks. Chapter 11: Exploring career pathways. Chapter 12: Drawing it all together. Bibliography.