Secure ICT Service Provisioning for Cloud, Mobile and Beyond

ESARIS: The Answer to the Demands of Industrialized IT Production Balancing Between Buyers and Providers
2. updated and extended Auflage 2017
ISBN: 978-3-658-16481-2
Verlag: Springer

Buch, Englisch, 369 Seiten, Format (B × H): 173 mm x 246 mm, Gewicht: 7695 g

Reihe: Edition

This book describes new methods and measures which enable ICT service providers and large IT departments to provide secure ICT services in an industrialized IT production environment characterized by rigorous specialization, standardization and division of labor along the complete supply chain. This book is also for suppliers playing their role in this industry. Even more important, user organizations are given deep insight in secure IT production which allows them to make the best out of cloud, mobile and beyond. This book presents a new organization and classification scheme being thoroughly modular and hierarchical. It contains a security taxonomy that organizes all aspects of modern industrialized IT production. The approach takes operational requirements into account and focuses on user requirements, thus facing the reality in the market economy. Despite cost pressure, providers must ensure security by exploiting economies of scale to raise the efficiency also with respect to security. Furthermore, this book describes a wealth of security measures derived from real-world challenges in IT production and IT service management.

Zielgruppe

Professional/practitioner

Autoren/Hrsg.

Behnsen, Wolfgang

von Faber, Eberhard

Fachgebiete

• Mathematik | Informatik EDV | Informatik Computerkommunikation & -vernetzung Cloud-Computing, Grid-Computing
• Mathematik | Informatik EDV | Informatik Angewandte Informatik Wirtschaftsinformatik
• Mathematik | Informatik EDV | Informatik Computerkommunikation & -vernetzung Netzwerksicherheit
• Wirtschaftswissenschaften Betriebswirtschaft Wirtschaftsinformatik, SAP, IT-Management

Inhaltsverzeichnis

Challenges – Transparency, interaction and standardization – Dimensions, work areas, hierarchy, collaboration model – Security taxonomy and its everyday use – Secured by definition: integration with core business – Standardization concepts and practice – Attainment: achieving compliance with standards – Fulfillment: meeting customer demands – Flexibility: managing the supplier network – Maintenance: document management and more – Transformation: sustainable roll-out – Implementation: IT production and its protection in practice – Routine: day-to-day security management using ESARIS

Über Autor(innen)

Eberhard von Faber has an about 25-year-industrial experience in information security. His field of work at T-Systems is Security Strategy and Executive Consulting. He is also a professor at Brandenburg University of Applied Science.

Wolfgang Behnsen, being retired now, was Senior Security Manager at T-Systems. He worked in several roles in information security management during his professional career. He holds various recognized security certificates and is member of diverse associations.