Enterprise Security Risk Management (ESRM) in the Real World : A Field Guide for Security Leaders Who Get Things Done (Hardcover)

Introduction: Simplifying Security in a Complex World?Section 1: Changing the?Way?We Think About Security?1. The ESRM Difference 2.?Thinking Like a Risk Manager?Section 2: Turning Strategy into Action ? The Three Essential Questions?3.?What Am I Trying to Protect? - Understanding Critical Assets and Their Impact?4.?What Does It Truly Need to Be Protected From? - Understanding Threat to Evaluate Risk?5. How Can We Most Effectively and Efficiently Protect It? - Choosing the Best Mitigations for Your Risk Profile?Section 3: Sustaining ESRM ? Improvement, Oversight, and Culture?6.?Continual Improvement Strategies 7.?Required for Success: Making the Shift to a Security-Driven Culture?Section 4: What’s Next for ESRM??8. The Future of ESRM: Adapting to an Accelerating World?