000 04232nam a22005295i 4500
999 _c200434450
_d52662
003 DE-He213
005 20231104114411.0
007 cr nn 008mamaa
008 151001s2015 gw | s |||| 0|eng d
020 _a9783319235707
_z978-3-319-23570-7
024 7 _a10.1007/978-3-319-23570-7
_2doi
040 _aTR-AnTOB
_beng
_cTR-AnTOB
_erda
050 4 _aQA76.9.A25
072 7 _aUR
_2bicssc
072 7 _aCOM053000
_2bisacsh
072 7 _aUR
_2thema
072 7 _aUTN
_2thema005.8
_223
100 1 _aRefsdal, Atle.
_eauthor.
_4aut
_4http://id.loc.gov/vocabulary/relators/aut
245 1 0 _aCyber-Risk Management /
_cby Atle Refsdal, Bjørnar Solhaug, Ketil Stølen.
264 1 _aCham :
_bSpringer International Publishing :
_bImprint: Springer,
_c2015.
300 _a1 online resource
336 _atext
_btxt
_2rdacontent
337 _acomputer
_bc
_2rdamedia
338 _aonline resource
_bcr
_2rdacarrier
347 _atext file
_bPDF
_2rda
490 0 _aSpringerBriefs in Computer Science,
_x2191-5768
505 0 _a1 Introduction -- Part I Conceptual Introduction -- 2 Risk Management -- 3 Cyber-systems -- 4 Cybersecurity -- 5 Cyber-risk Management -- Part II Cyber-risk Assessment Exemplified -- 6 Context Establishment -- 7 Risk Identification -- 8 Risk Analysis -- 9 Risk Evaluation -- 10 Risk Treatment -- Part III Known Challenges and How to Address Them in Practice -- 11 Which Measure of Risk Level to Use?- 12 What Scales Are Best Suited Under What Conditions?- 13 How to Deal with Uncertainty?- 14 High-consequence Risk with Low Likelihood -- 15 Conclusion -- Glossary -- References -- Index.
520 _aThis book provides a brief and general introduction to cybersecurity and cyber-risk assessment. Not limited to a specific approach or technique, its focus is highly pragmatic and is based on established international standards (including ISO 31000) as well as industrial best practices. It explains how cyber-risk assessment should be conducted, which techniques should be used when, what the typical challenges and problems are, and how they should be addressed. The content is divided into three parts. First, part I provides a conceptual introduction to the topic of risk management in general and to cybersecurity and cyber-risk management in particular. Next, part II presents the main stages of cyber-risk assessment from context establishment to risk treatment and acceptance, each illustrated by a running example. Finally, part III details four important challenges and how to reasonably deal with them in practice: risk measurement, risk scales, uncertainty, and low-frequency risks with high consequence. The target audience is mainly practitioners and students who are interested in the fundamentals and basic principles and techniques of security risk assessment, as well as lecturers seeking teaching material. The book provides an overview of the cyber-risk assessment process, the tasks involved, and how to complete them in practice.
650 0 _aComputer security.
650 0 _aSystem safety.
650 0 _aInformation Systems.
650 0 _aComputer science.
650 0 _aManagement.
650 1 4 _aSystems and Data Security.
_0http://scigraph.springernature.com/things/product-market-codes/I28060
650 2 4 _aQuality Control, Reliability, Safety and Risk.
_0http://scigraph.springernature.com/things/product-market-codes/T22032
650 2 4 _aManagement of Computing and Information Systems.
_0http://scigraph.springernature.com/things/product-market-codes/I24067
650 2 4 _aProbability and Statistics in Computer Science.
_0http://scigraph.springernature.com/things/product-market-codes/I17036
650 2 4 _aInnovation/Technology Management.
_0http://scigraph.springernature.com/things/product-market-codes/518000
700 1 _aSolhaug, Bjørnar.
_eauthor.
_4aut
_4http://id.loc.gov/vocabulary/relators/aut
700 1 _aStølen, Ketil.
_eauthor.
_4aut
_4http://id.loc.gov/vocabulary/relators/aut
710 2 _aSpringerLink (Online service)
856 4 0 _3Springer eBooks
_zOnline access link to the resource
_uhttps://doi.org/10.1007/978-3-319-23570-7
942 _2lcc
_cEBK
041 _aeng