Executive Summary

This ebooks presents effective strategies and solutions for Governance, Risk and Compliance (GRC). See full details in the Table of Contents and Bookmarks. The key areas and strategic solutions include the following:

• Major areas of Governance, Risk Management and Compliance controls
• Presentation Slides and Key Summaries of Effective GRC Implementation
• GRC Implementation based on Major International Industry Standards including IEEE
  16805, ISO 27001–27058 and Best Practices

o GRC Gap Analysis, Assessments, Risk Control Matrices, Risk Assessments, Risk

     Mitigation and Compliance

o Major Phases of Governance, Risk Management and Compliance Implementation     

     Strategy

o Phase by Phase Strategy for Governance, Risk Management and Compliance

     Implementation

o Effective Strategies and Detailed Steps for Developing Effective and Critical Controls

     for Governance, Risk Management and Compliance

Detailed Step by Step Strategy for Effective Development, Implementation, Update

    and Maintenance of GRC Policies, Standards, Processes and Procedures

Detailed Practical examples of Steps for Developing Project Plans and Status Reports

   for Governance, Risk Management and Compliance

Detailed Practical Steps and examples of Risk Assessments and GRC Implementation

   for all Business and IT environments

Tools and Resources for GRC and Enterprise System Environments

Enterprise GRC Monitoring Systems and Products for Infrastructures, Networks, Applications, Data, MDM and SOA

o Risk Assessments for GRC

o Infrastructure, Network and Application Security

o Web security Vulnerability Scanning

o Ethical Hacking, Penetration Testing

o Code Review

o Event Correlation and Data Mining and Forensics

o Infrastructure, Network and Application Security, Web security Vulnerability

Scanning, Code Review, and Ethical Hacking, Penetration Testing, Event

Correlation and Data Mining, Forensics

o Enterprise IT and Information Security

o Enterprise IT and Information Security, GRC, Data Protection and Compliance

o For all products, enterprise security and data management, applications and

     Webserver controls

o GRC resources for Infrastructure, Network and Application Security, Web Security

    Vulnerability Scanning, Code Review, and Ethical Hacking, Penetration Testing,

    Event Correlation and Data Mining

o Enterprise IT and Information Security

o Enterprise IT and Information Security, GRC, Data Protection and Compliance

o For all products, enterprise security and data management, applications and    

     Webserver controls

o IT and Information Security, Engineering, Compliance and Data Protection for all  

      major global systems and industries

     

 

Testimonial

---

 

"These e-books are very useful because they provide a consolidated, detailed perspective of the broad field of information security governance. There is a lot of information and detail."

Dr. Ulrich Lang, CEO & Co-Founder of ObjectSecurity, PhD Cambridge University, UK, MSc Information Security, University of London Royal Holloway, Information Security Group