ITIL Security Management

The IT Security Management book builds upon the base of the IT Infrastructure Library and explains how to organise and maintain the management of security of the IT infrastructure, from the IT manager’s point of view.

Utilising existing ITIL processes as a starting point, this book adds Security management activities to those processes. The ITIL Security management process, although a separate process, is thus integrated as far as possible into the other processes.

In order to aid in implementing and performing Security Management, best practice measures and guidelines are given in the last chapters and annexes of this book. The BSI Code of Practice for Information Security Management is used as a reference.

Contents

•  Introduction
  
•  Fundamentals of Information Security
  
•  ITIL and Security Management
  
•  Security Management Measures
  
•  Guidelines for Implementing Security Management
  
•  Annex A Security Management with ITIL in relation to the Code of Practice for Information
       Security  (BS7799)
  
•  Annex B Specimen Security Section in the SLA
  
•  Annex C Framework for Drawing up a Security Plan
  
•  Annex D Literature
  
•  Annex E Glossary of terms