Information Security, State and Local Government Series

Information Security describes a methodology for security planning that focuses on risks, related threats, tools for addressing the threats, and the processes needed to build more secure systems and continuously monitor and improve security. The approach is based on a proven technique that results in documented security strategies and informed decisions. The manual can be used as a guide for security "best practices" because it provides a wider perspective on security in general for a better understanding of how to reduce and manage security risk.

•  The author writes from a data management planning perspective and provides "best practices" guidance.
•  Sample forms, diagrams, charts, glossary, risk assessment worksheets, and other tools facilitate implementation of the security plan.
•  The manual is organized by security planning phases which makes the process easy to follow.
•  Sample policies simplify the policy development process and ensure the plan, once implemented, can be continuously monitored and managed.