|
|
 |
 |
 |
You are in >
OECD Bookshop >
Publication Page
|
OECD Reviews of Risk Management Policies
Information Security
|
|
OECD. Published by : OECD Publishing
|
|
|
|
Version: Print (Paperback) + Free PDF
|
|
Price:
€25 | $35 | £22 | ¥3200 |
|
|
Standard shipping included!
|
|
|
Availability: Available
Publication date: 26 Apr 2006
Language: English
Pages: 132
ISBN: 9789264025509
OECD Code: 032006021P1
|
|
|
Other Versions & Languages |
Table of contents
|
|
|
The development of information and communication technologies and networks, and in particular that of the Internet, has gone hand in hand with the emergence of new types of malevolent actions called cyber-crime: viruses, worms, Trojan horses, and the like. While a number of factors make a strong case for governmental action in the area of information security, there are also important limits to what governments can achieve. This review, the first in a series of risk management policy reviews being conducted by the OECD, identifies areas of good practice in Norway's policies for information security, as well as areas where improvements could be made. For areas that could benefit from improvement, it proposes opportunities for action and, when possible, suggests alternatives.
|
|
|
Other Versions:
E-book - PDF Format
|
Further reading:
Emerging Risks in the 21st Century - An Agenda for Action (Available)
Large-scale Disasters - Lessons Learned (Available)
The Security Economy - (Available)
|
|
Table of contents:
Summary of Findings and Recommendations
Chapter 1. The Norwegian Strategy for Information Security
Chapter 2. Assessing Information Security Risks
-Risk Assessment in the Government
-Risk Assessment in Critical Infrastructures
Chapter 3. Protecting Information Systems
-Protection of Government Systems
-Protection of Critical Infrastructure Systems
Chapter 4. Managing Incidents, Emergencies, and Crises
-Incident Management
-Contingency and Preparedness Planning
-Emergency and Crisis Management
Chapter 5. Strengthening the Foundations of Security
-Awareness-Raising
-Information-Sharing
-Education and R&D
Bibliography
|
|
|
 |
|
|
