Security problems have evolved in the corporate world because of technological changes, such as using the Internet as a means of communication. With this, the creation, transmission, and storage of information may represent security problem.
Metrics and Methods for Security Risk Management is of interest, especially since the 9/11 terror attacks, because it addresses the ways to manage risk security in the corporate world. The book aims to provide information about the fundamentals of security risks and the corresponding components, an analytical approach to risk assessments and mitigation, and quantitative methods to assess the risk components. In addition, it also discusses the physical models, principles, and quantitative methods needed to assess the risk components. The by-products of the methodology used include security standards, audits, risk metrics, and program frameworks.
Security professionals, as well as scientists and engineers who are working on technical issues related to security problems will find this book relevant and useful.
Offers an integrated approach to assessing security risk
Addresses homeland security as well as IT and physical security issues
* Describes vital safeguards for ensuring true business continuity
Security managers with both IT security and physical security responsibilities; counterterrorism practitioners
About the Author Foreword Preface Acknowledgments Part I The Structure of Security Risk Chapter 1 Security Threats and Risk 1.1 Introduction to Security Risk or Tales of the Psychotic Squirrel and the Sociable Shark 1.2 The Fundamental Expression of Security Risk 1.3 Introduction to Security Risk Models and Security Risk Mitigation 1.4 Summary Chapter 2 The Fundamentals of Security Risk Measurements 2.1 Introduction 2.2 Linearity and Non-linearity 2.3 Exponents, Logarithms and Sensitivity to Change 2.4 The Exponential Function ex 2.5 The Decibel (dB) 2.6 Security Risk and the Concept of Scale 2.7 Some Common Physical Models in Security Risk 2.8 Visualizing Security Risk 2.9 An Example: Guarding Costs 2.10 Summary Chapter 3 Risk Measurements and Security Programs 3.1 Introduction 3.2 The Security Risk Assessment Process 3.3 Managing Security Risk 3.4 Security Risk Audits 3.5 Security Risk Program Frameworks 3.6 Summary Part II Measuring and Mitigating Security Risk Chapter 4 Measuring the Likelihood Component of Security Risk 4.1 Introduction 4.2 Likelihood or Potential for Risk? 4.3 Estimating the Likelihood of Randomly Occurring Security Incidents 4.4 Estimating The Potential for Biased Security Incidents 4.5 Averages and Deviations 4.6 Actuarial Approaches to Security Risk 4.7 Randomness, Loss, and Expectation Value 4.8 Financial Risk 4.9 Summary Chapter 5 Measuring the Vulnerability Component of Security Risk 5.1 Introduction 5.2 Vulnerability to Information Loss through Unauthorized Signal Detection 5.3 Vulnerability to Explosive Threats 5.4 A Theory of Vulnerability to Computer Network Infections 5
- No. of pages:
- © Syngress 2010
- 8th July 2010
- eBook ISBN:
- Paperback ISBN:
"Carl S. Young, VP [and senior risk strategist at a major international corporation], has delivered a volume to make the technology bedrock of security more comprehensible. To justify any security measure, Young shows how risk management can be understood quantitatively. That’s important because so many workplace decisions on vulnerability are made after calculating risk metrics."--Security Letter, Vol. XL, No. 9 (September 2010)
"…This author has a unique and useful perspective on an important and timely topic."-- Jon A. Schmidt, PE, BSCP, Director of Antiterrorism Services, Burns & McDonnell, Kansas City, MO.
"Dealing with security risks requires not only the wisdom and experience to assess threats, but also the scientific and technical knowledge to mitigate their risk. Carl Young's wide-ranging expertise in both these areas has been recognized and honored during his distinguished career in government and in the private sector, and informs this fascinating book…[T]his book will be valuable to security professionals as well as concerned citizens."--Prof Emeritus Sidney Drell, Deputy Director, Stanford Linear Accelerator Center (1969-1998).
"In the post 9/11 world we had to find cost effective, practical, risk-based, resilient solutions to immensely challenging issues. Carl Young was, and is, central to that work. He combines academic brilliance with practical, hands-on experience of delivering security solutions. This book is a synthesis of that work."--James A. King, CBE, Senior UK government security and counterterrorism advisor (1978-2008). Head of Security and Fraud, Lloyds Banking Group, UK.
"There is nobody in the field of security who surpasses Carl Young's experience and expertise. And now, for the benefit of us all, he has written Metrics and Methods for Security Risk Management. From the thoughtful layout of the chapters, to the c