Developing an Enterprise Continuity Program

Sergei Petrenko

$252

Hardback

Not in-store but you can order this
How long will it take?

Availability Information

We source books from suppliers in Australia and overseas. For books we don't currently have in stock, the time it takes to get them from our suppliers can vary widely - from a few days to a few months - so we check each book with each supplier to determine the expected time it will take to be supplied to us.

We then advise you accordingly. If the time taken to get any book is too long for you, you can let us know and we will cancel or adjust your order, and refund as required.

To find out the anticipated arrival time for specific items prior to ordering, please contact us by phone or email:

Phone +61 2 9264 3111, or 1800 4 BOOKS (1800 4 26657) if outside Sydney:
option 1 Abbey's Bookshop (Crime, History, Science, Kids & more) • info@abbeys.com.au
option 2 Language Book Centre (ESL & Foreign Languages) • language@abbeys.com.au
option 3 Galaxy Bookshop (Sci-fi, Fantasy, Romance, Graphic Novels) • sf@galaxybooks.com.au

QTY:

English

River Publishers
30 June 2021

Data mining; Computer science

The book discusses the activities involved in developing an Enterprise Continuity Program (ECP) that will cover both Business Continuity Management (BCM) as well as Disaster Recovery Management (DRM). The creation of quantitative metrics for BCM are discussed as well as several models and methods that correspond to the goals and objectives of the International Standards Organisation (ISO) Technical Committee ISO/TC 292 ""Security and resilience”. Significantly, the book contains the results of not only qualitative, but also quantitative, measures of Cyber Resilience which for the first time regulates organizations’ activities on protecting their critical information infrastructure.

The book discusses the recommendations of the ISO 22301: 2019 standard “Security and resilience — Business continuity management systems — Requirements” for improving the BCM of organizations based on the well-known “Plan-Do-Check-Act” (PDCA) model. It also discusses the recommendations of the following ISO management systems standards that are widely used to support BCM. The ISO 9001 standard ""Quality Management Systems""; ISO 14001 ""Environmental Management Systems""; ISO 31000 ""Risk Management"", ISO/IEC 20000-1 ""Information Technology - Service Management"", ISO/IEC 27001 ""Information Management security systems”, ISO 28000 “Specification for security management systems for the supply chain”, ASIS ORM.1-2017, NIST SP800-34, NFPA 1600: 2019, COBIT 2019, RESILIA, ITIL V4 and MOF 4.0, etc. The book expands on the best practices of the British Business Continuity Institute’s Good Practice Guidelines (2018 Edition), along with guidance from the Disaster Recovery Institute’s Professional Practices for Business Continuity Management (2017 Edition). Possible methods of conducting ECP projects in the field of BCM are considered in detail. Based on the practical experience of the author there are examples of Risk Assessment (RA) and Business Impact Analysis (BIA), examples of Business Continuity Plans (BCP) & Disaster Recovery Plans (DRP) and relevant BCP & DRP testing plans.

This book will be useful to Chief Information Security Officers, internal and external Certified Information Systems Auditors, senior managers within companies who are responsible for ensuring business continuity and cyber stability, as well as teachers and students of MBA’s, CIO and CSO programs.

By: Sergei Petrenko
Imprint: River Publishers
Country of Publication: Denmark
Dimensions: Height: 234mm, Width: 156mm,
Weight: 1.920kg
ISBN: 9788770223973
ISBN 10: 8770223971
Pages: 584
Publication Date: 30 June 2021
Audience: Professional and scholarly , Undergraduate
Format: Hardback
Publisher's Status: Active

Developing an Enterprise Continuity Program

Sergei Petrenko was born in 1968 in Kaliningrad (K¨onigsberg). In 1991, he graduated with honors from the Leningrad State University with a degree in mathematics and engineering. In 1997 – adjuncture and in 2003, he obtained his doctorate. The designer of information security systems of critical information objects: Three national Centers for Monitoring Information Security Threats and two Situational-Crisis Centers (RCCs) of domestic state; Three operators of special information security services MSSP (Managed Security Service Provider) and MDR (Managed Detection and Response Services) and two virtual trusted communication operators MVNO; More than 10 State and corporate segments of the System for Detection, Prevention and Elimination of the Effects of Computer Attacks (SOPCA) and the System for Detection and Prevention of Computer Attacks (SPOCA); Five monitoring centers for information security threats and responding to information security incidents CERT (Computer Emergency Response Team) and CSIRT (Computer Security Incident Response Team) and two industrial CERT industrial Internet IIoT/IoT. Head of the State Scientific School ""Mathematical and Software Support of Critical Objects of the Russian Federation"". Expert of the Section on Information Security Problems of the Scientific Council under the Security Council of the Russian Federation. Scientific Editor of the magazine ""Inside. Data protection"". Doctor of Technical Sciences, Professor. It is part of the management of the Interregional Public Organization Association of Heads of Information Security Services (ARSIB), an independent non-profit organization Russian Union of IT Directors (SODIT). Author and co-author of 14 monographs and practical manuals of publishing houses ""Springer Nature Switzerland AG"", ""River Publishers"", ""Peter"", ""Athena"" and ""DMK-Press"": ""Big Data Technologies for Monitoring of Computer Security: A Case Study of the Russian Federation"", ""Cyber Resilience"", ""Cyber Security Innovation for the Digital Economy: A Case Study of the Russian Federation"", ""Methods of information protection in the Internet"", ""Methods and technologies of information security of critical objects of the national infrastructure"", ""Methods and technologies of cloud security"", ""Audit of corporate Internet/Internet security"", ""Information Risk Management"", ""Information Security Policies"" and more than 350 articles on information security issues (Proceedings of ISA RAS and SPIIRAS, journals ""Cybersecurity issues"", ""Information security problems"", ""Open systems"", ""Inside: Information protection"", ""Security systems"", ""Electronics"", ""Communication Bulletin"", ""Network Journal"", ""Connect World of Connect"", etc.).