E-Books →Practical Network Security An auditee's guide to zero findings

With our network being exposed to a whole plethora of security threats, all technical and non-technical people are expected to be aware of security processes. Every security assessment (technical/ non-technical) leads to new findings and the cycle continues after every audit. This book explains the auditor's process and expectations and also helps an organisation prepare for any type of audit and minimise security findings.
It follows a lifecycle approach to information security by understanding:

Why we need Information security
How we can implement
How to operate securely and maintain a secure posture
How to face audits
Contents
Basics of Information Security
Threat Paradigm
Information Security Controls
Decoding Policies Standards Procedures & Guidelines
Network security design
Know your assets
Implementing Network Security
Secure Change Management
Vulnerability and Risk Management
Access Control
Capacity Management
Log Management
Network Monitoring
Information Security Audit
Technical Compliance Audit
Penetration Testing