Skip to main content
Elsevier

Books in Security management

  • School Security

    How to Build and Strengthen a School Security Program
    • 3rd Edition
    • Paul Timm
    • English
    School Security: How to Build and Strengthen a School Safety Program, Third Edition emphasizes a proactive rather than reactive approach to school security. Through a holistic approach, rather than focusing on a particular threat or event, readers are introduced to basic loss prevention and safety concepts. The book covers fundamental CPTED concepts and addresses bullying, teen suicide, harassment, and dating violence. This updated new edition includes new information throughout on topics such as new legislative requirements, technological advancements such as AI, communications and access control, and even a parent’s guide to school safety.The book discusses how to positively influence student behavior, lead staff training programs, and write sound security policies. It presents complex security concepts in straightforward language that resonates with educational stakeholders who may not have security backgrounds. It recognizes the financial constraints facing most educational institutions and prioritizes cost-effective solutions. Tiered implementation strategies allow schools to enhance security incrementally within available resources. It also emphasizes integrating security measures into school culture, balancing robust security with maintaining an open, welcoming educational environment—a critical concern overlooked in more technically-oriented security literature.

  • Introduction to Emergency Management

    • 8th Edition
    • George Haddow + 2 more
    • English
    Introduction to Emergency Management, Eighth Edition sets the standard for excellence in the field and has educated a generation of emergency management professionals. This trusted resource provides a comprehensive overview of core concepts in emergency management and instructs in their application, addressing why the emergency management profession exists, what actions its professionals and practitioners are tasked with performing, and what achievements are sought through the conduct of these various efforts. Students and new professionals alike will gain an enhanced understanding of key terminology and concepts, enabling them to work with emergency management specialists.Fully updated throughout, the new edition includes revised workflows and communications; explanations of FEMA, state, and local emergency management organizational policies; the growing role of the private sector in emergency management; Covid-19 pandemic preparedness and response; and the impact of climate change on emergency management policies and practices, among other timely examples and application areas. Each chapter features all-new case studies on recent disasters, key terms, summary points, and self-review questions. Student and faculty use is supported by an expanded ancillary package, featuring a fuller instructor manual, lecture PowerPoint Slides, and linked documents, data sets, references, and video examples.

  • Security Operations Management

    • 4th Edition
    • Robert McCrie + 1 more
    • English
    Security Operations Management, Fourth Edition, the latest release in this seminal reference on corporate security management operations for today’s security management professionals and students, explores the characteristics of today’s globalized workplaces, security’s key role within them, and what the greatest concern is for security practitioners and senior managers. Incorporating the latest security research and best practices, the book covers key skills needed by security managers to demonstrate the value of their security program, offers information on identifying and managing risk, and reviews the latest technological advances in security control, command, communications and computing.

  • Insider Threat

    Prevention, Detection, Mitigation, and Deterrence
    • 1st Edition
    • Michael G. Gelles
    • English
    Insider Threat: Detection, Mitigation, Deterrence and Prevention presents a set of solutions to address the increase in cases of insider threat. This includes espionage, embezzlement, sabotage, fraud, intellectual property theft, and research and development theft from current or former employees. This book outlines a step-by-step path for developing an insider threat program within any organization, focusing on management and employee engagement, as well as ethical, legal, and privacy concerns. In addition, it includes tactics on how to collect, correlate, and visualize potential risk indicators into a seamless system for protecting an organization’s critical assets from malicious, complacent, and ignorant insiders. Insider Threat presents robust mitigation strategies that will interrupt the forward motion of a potential insider who intends to do harm to a company or its employees, as well as an understanding of supply chain risk and cyber security, as they relate to insider threat.

  • Maritime Security

    An Introduction
    • 2nd Edition
    • Michael McNicholas
    • English
    Maritime Security: An Introduction, Second Edition, provides practical, experience-based, and proven knowledge - and a "how-to-guide" - on maritime security. McNicholas explains in clear language how commercial seaports and vessels function; what threats currently exist; what security policies, procedures, systems, and measures must be implemented to mitigate these threats; and how to conduct ship and port security assessments and plans. Whether the problem is weapons of mass destruction or cargo theft, Maritime Security provides invaluable guidance for the professionals who protect our shipping and ports. New chapters focus on whole government maritime security, UN legal conventions and frameworks, transnational crime, and migration. Updates throughout will provide the latest information in increasingly important field.

  • Threat Assessment and Risk Analysis

    An Applied Approach
    • 1st Edition
    • Gregory Allen + 1 more
    • English
    Threat Assessment and Risk Analysis: An Applied Approach details the entire risk analysis process in accessible language, providing the tools and insight needed to effectively analyze risk and secure facilities in a broad range of industries and organizations. The book explores physical vulnerabilities in such systems as transportation, distribution, and communications, and demonstrates how to measure the key risks and their consequences, providing cost-effective and achievable methods for evaluating the appropriate security risk mitigation countermeasures. Users will find a book that outlines the processes for identifying and assessing the most essential threats and risks an organization faces, along with information on how to address only those that justify security expenditures. Balancing the proper security measures versus the actual risks an organization faces is essential when it comes to protecting physical assets. However, determining which security controls are appropriate is often a subjective and complex matter. The book explores this process in an objective and achievable manner, and is a valuable resource for security and risk management executives, directors, and students.

  • Workplace Safety

    Establishing an Effective Violence Prevention Program
    • 1st Edition
    • Randall W. Ferris + 1 more
    • English
    Workplace Safety: Establishing an Effective Violence Prevention Program includes a powerful model on how to overcome organizational rationalization, objection, and denial when confronted with proposing a workplace violence protection program. The book offers real-life cases studies on how violence was successfully avoided using the book’s program, and also shows how to recognize and report precursor behaviors that precede violence. In addition, the book demonstrates proven methods for properly, and effectively, responding to violence should it occur, and tactfully managing the aftermath.

  • Security Litigation

    Best Practices for Managing and Preventing Security-Related Lawsuits
    • 1st Edition
    • Eddie Sorrells
    • English
    Security Litigation: Best Practices for Managing and Preventing Security-Related Lawsuits provides practical guidance and examples on how to deal with the most difficult legal issues that security executives face every day, also exploring the key issues that occur before, during, and after a lawsuit. The book demonstrates scenarios that have actually played out in courtrooms, depositions, and contractual negotiations, and provides answers to challenging security litigation questions such as, What does this contractual provision mean if we get sued? Am I in legal trouble if I assign unarmed vs. armed officers and a crime occurs? How do I defend my company without blaming my customer? Increasingly, issues such as security surveys, contractual indemnification, and even marketing language are at the center of lawsuits concerning security practices. Many organizations face security-related lawsuits on an increasing basis, and this book provides a much needed resource to help security professionals successfully navigate the unique nature of security-related lawsuits. Accessibly written for those without a law background, the book assists readers through education, awareness, sample contract language, and assessment templates, offering meaningful recommendations and solutions.

  • Security Operations Management

    • 3rd Edition
    • Robert McCrie
    • English
    Security Operations Management, 3rd edition, is the latest edition the seminal reference on corporate security management operations for today’s security management professionals and students. The book explores the characteristics of today’s globalized workplaces, why security has a key role within them, and what the greatest concern are to security practitioners and senior managers. Incorporating the latest security research and best practices, updates to Security Operations Management 3rd edition include explorations of the key skills needed by security managers to demonstrate the value of their security program, greater emphasis on identifying and managing risk, and coverage of the latest technological advances in security control, command, communications, and computing. The third edition also delves more deeply than previous editions into online security training practices, as well as investigates the changing roles of women and minorities in security operations.

  • Effective Security Management

    • 6th Edition
    • Charles A. Sennewald + 1 more
    • English
    Effective Security Management, Sixth Edition teaches practicing security professionals how to build their careers by mastering the fundamentals of good management. The author, Charles Sennewald, brings common sense, wisdom, and humor to this bestselling introduction to security management that is ideal for both new and experienced security managers. The sixth edition of this classic professional reference work on the topic includes newly updated and expanded coverage of topics such as the integration of security executive into the business, background checks and hiring procedures, involvement in labor disputes, organized crime, and the role of social media.

  • Next Generation Red Teaming

    • 1st Edition
    • Henry Dalziel
    • English
    Red Teaming is can be described as a type of wargaming.In private business, penetration testers audit and test organization security, often in a secretive setting. The entire point of the Red Team is to see how weak or otherwise the organization’s security posture is. This course is particularly suited to CISO’s and CTO’s that need to learn how to build a successful Red Team, as well as budding cyber security professionals who would like to learn more about the world of information security.

  • Infosec Management Fundamentals

    • 1st Edition
    • Henry Dalziel
    • English
    Infosec Management Fundamentals is a concise overview of the Information Security management concepts and techniques, providing a foundational template for both experienced professionals and those new to the industry. This brief volume will also appeal to business executives and managers outside of infosec who want to understand the fundamental concepts of Information Security and how it impacts their business decisions and daily activities.

  • Corporate Security Management

    Challenges, Risks, and Strategies
    • 1st Edition
    • Marko Cabric
    • English
    Corporate Security Management provides practical advice on efficiently and effectively protecting an organization's processes, tangible and intangible assets, and people. The book merges business and security perspectives to help transform this often conflicted relationship into a successful and sustainable partnership. It combines security doctrine, business priorities, and best practices to uniquely answer the Who, What, Where, Why, When and How of corporate security. Corporate Security Management explores the diverse structures of security organizations in different industries. It shows the crucial corporate security competencies needed and demonstrates how they blend with the competencies of the entire organization. This book shows how to identify, understand, evaluate and anticipate the specific risks that threaten enterprises and how to design successful protection strategies against them. It guides readers in developing a systematic approach to assessing, analyzing, planning, quantifying, administrating, and measuring the security function.

  • Security Leader Insights for Business Continuity

    Lessons and Strategies from Leading Security Professionals
    • 1st Edition
    • Phil Hopkins
    • English
    How do you, as a busy security executive or manager, stay current with evolving issues, familiarize yourself with the successful practices of your peers, and transfer this information to build a knowledgeable, skilled workforce the times now demand? With Security Leader Insights for Business Continuity, a collection of timeless leadership best practices featuring insights from some of the nation’s most successful security practitioners, you can.This book can be used as a quick and effective resource to bring your security staff up to speed on security’s role in business continuity. Instead of re-inventing the wheel when faced with a new challenge, these proven practices and principles will allow you to execute with confidence knowing that your peers have done so with success. It includes chapters on the business resiliency and emergency preparedness, leading during a crisis, corporate social responsibility, and the Voluntary Private Sector Preparedness Certification Program.Security Leader Insights for Business Continuity is a part of Elsevier’s Security Executive Council Risk Management Portfolio, a collection of real-world solutions and "how-to" guidelines that equip executives, practitioners, and educators with proven information for successful security and risk management programs.

  • Introduction to Emergency Management, Enhanced

    • 5th Edition
    • George Haddow + 2 more
    • English
    Introduction to Emergency Management, Fifth Edition, offers a fully up-to-date analysis of US emergency management principles. In addition to expanding coverage of risk management in a time of climate change and terrorism, Haddow, Bullock, and Coppola discuss the impact of new emergency management technologies, social media, and an increasing focus on recovery. They examine the effects of the 2012 election results and discuss FEMA’s controversial National Flood Insurance Program (NFIP). Introduction to Emergency Management, Fifth Edition, gives instructors and students the best textbook content, instructor-support materials, and online resources to prepare future EM professionals for this demanding career.

  • Smart Security: Understanding and Contributing to the Business

    Proven Practices
    • 1st Edition
    • J. David Quilter
    • English
    Smart Security: Understanding and Contributing to the Business is a video presentation. Length: 68 minutes.In Smart Security: Understanding and Contributing to the Business, presenter J. David Quilter demonstrates the benefits of how a fully integrated security program increases business profits and delivers smart security practices at the same time. The presentation does away with the misconception that security is only an expense. In fact, a well-integrated security program can protect business interests, thereby enhancing productivity and net income. Quilter covers cost analysis and security measures and metrics, along with how to demonstrate return on investment and leverage executive leadership. The practices and tools discussed in this presentation will reduce business losses and help improve security and operations.Smart Security: Understanding and Contributing to the Business is a part of Elsevier’s Security Executive Council Risk Management Portfolio, a collection of real world solutions and "how-to" guidelines that equip executives, practitioners, and educators with proven information for successful security and risk management programs.

  • Personnel Protection: Kidnapping Issues and Policies

    Proven Practices
    • 1st Edition
    • Jerome Miller + 1 more
    • English
    Personnel Protection: Kidnapping Issues and Policies is a video presentation. Length: 9 minutes.In Personnel Protection: Kidnapping Issues and Policies, presenters Jerome Miller and Radford Jones discuss the issue of kidnapping as it relates to an executive security program. It covers the risks for kidnapping of the executive or executive’s family members, along with strategies for creating a sound corporate kidnapping policy. The presenters also discuss what kind of response the organization should make during a kidnapping, as the first hours immediately following are always critical to a successful resolution.This presentation is one of 11 modules in the Personnel Protection presentation series, which is designed for companies considering an executive security program or for companies with an executive security program already in place. Other topics in this series include: concepts of executive security; advance procedures; the executive threat assessment profile; residential security; security personnel; security procedures for worksite, aircraft, and vehicle operations; and executive compensation issues, including IRS requirements.The Personnel Protection presentation series is a part of Elsevier’s Security Executive Council Risk Management Portfolio, a collection of real world solutions and "how-to" guidelines that equip executives, practitioners, and educators with proven information for successful security and risk management programs.

  • Security Leader Insights for Risk Management

    Lessons and Strategies from Leading Security Professionals
    • 1st Edition
    • Richard Chase
    • English
    How do you, as a busy security executive or manager, stay current with evolving issues, familiarize yourself with the successful practices of your peers, and transfer this information to build a knowledgeable, skilled workforce the times now demand? With Security Leader Insights for Risk Management, a collection of timeless leadership best practices featuring insights from some of the nation’s most successful security practitioners, you can.This book can be used as a quick and effective resource to bring your security staff up to speed on security’s role in risk management. Instead of re-inventing the wheel when faced with a new challenge, these proven practices and principles will allow you to execute with confidence knowing that your peers have done so with success. Part one looks at the risk assessment and subtopics such as compliance, using risk assessments to increase security’s influence, and risk indicator dashboards. Part two discusses risk management topics such as board-level risk, global risk, risk appetite, and enterprise risk management (ERM).Security Leader Insights for Risk Management is a part of Elsevier’s Security Executive Council Risk Management Portfolio, a collection of real-world solutions and "how-to" guidelines that equip executives, practitioners, and educators with proven information for successful security and risk management programs.

  • The Ultimate Financial Security Survey

    • 1st Edition
    • James L Schaub + 1 more
    • English
    The most in-depth and comprehensive financial security survey on the market, this book will help the reader reveal vulnerabilities and identify critical areas by aiding with the time-consuming job of the security survey. 'The Ultimate Financial Security Survey', with over 1000 questions, is a time saver for the security manager. This valuable tool will save hours of typing because the questions on disk can be used and re-used to design specific security surveys.Tailor a survey for one or one hundred facilities and protect against fraud, information theft and robbery. This book has everything necessary to achieve this goal.

  • Retail Security and Loss Prevention

    • 1st Edition
    • Read Hayes
    • English
    RETAIL SECURITY AND LOSS PREVENTION is an invaluable reference for both retail and security professionals. Using step-by-step plans, this book helps the reader design and implement cost-effective loss control programs.It details an easy-to-follow proven process.

  • Personnel Protection: Vehicle Operations and Safety

    Proven Practices
    • 1st Edition
    • Jerome Miller + 1 more
    • English
    Personnel Protection: Vehicle Operations and Safety is a video presentation. Length: 20 minutes. Because a business executive typically spends a considerable amount of time travelling by vehicle, the greatest risk of injury or death to the executive is by vehicle accident or attack while in the vehicle. In Personnel Protection: Vehicle Operations and Safety, presenters Jerome Miller and Radford Jones discuss the basic security principles of executive driver safety and training. This 20-minute video presentation of narrated slides covers the challenges the executive driver may face, how and why to vary routes, schedules, and vehicles, and the characteristics of a qualified executive driver. This presentation is one of 11 modules in the Personnel Protection presentation series, which is designed for companies considering an executive security program or for companies with an executive security program already in place. Other topics in this series include: concepts of executive security; advance procedures; security personnel; the executive threat assessment profile; kidnapping issues and guidelines; security procedures for residence, worksite, and aircraft operations; and executive compensation issues, including IRS requirements. The Personnel Protection presentation series is a part of Elsevier’s Security Executive Council Risk Management Portfolio, a collection of real world solutions and "how-to" guidelines that equip executives, practitioners, and educators with proven information for successful security and risk management programs.

  • Personnel Protection: Threat Assessment Profile

    Proven Practices
    • 1st Edition
    • Jerome Miller + 1 more
    • English
    Personnel Protection: Threat Assessment Profile is a video presentation. Length: 12 minutes. In Personnel Protection: Threat Assessment Profile, presenters Jerome Miller and Radford Jones discuss the threat assessment profile as the basis for determining the need for an executive security program. This 12-minute video presentation of narrated slides covers the range of threats to consider, the executive’s public exposure and any history of threats, local safety issues, and business travel. The presenters emphasize the need for keeping an up-to-date executive dossier containing his or her personal information, in case there is a kidnapping situation. This presentation is one of 11 modules in the Personnel Protection presentation series, which is designed for companies considering an executive security program or for companies with an executive security program already in place. Other topics in this series include: concepts of executive security; advance procedures; security personnel; kidnapping issues and guidelines; security procedures for residence, worksite, aircraft, and vehicle operations; and executive compensation issues, including IRS requirements. The Personnel Protection presentation series is a part of Elsevier’s Security Executive Council Risk Management Portfolio, a collection of real world solutions and "how-to" guidelines that equip executives, practitioners, and educators with proven information for successful security and risk management programs.

  • Smart Security: Practices that Increase Business Profits

    Proven Practices
    • 1st Edition
    • J. David Quilter
    • English
    Smart Security: Practices that Increase Business Profits is a video presentation. Length: 58 minutes. Smart Security: Practices that Increase Business Profits offers proven concepts and practices for those seeking new and creative ways to understand and shape security that are tailored to the needs of their business or organization. In this 58-minute Proven Practices presentation, presenter J. David Quilter discusses how a fully integrated security program increases business profits while delivering smart security practices at the same time. The term "smart security" means to be simple, knowledgeable of both business and security basics, knowledgeable of the business market, and having a clear understanding of business principals. Using this definition, the presentation covers how to win and sustain executive leadership, deal with business realities, identify the root causes of business losses, and how to hold a frank and open discussion on loss when dealing with business risk. Smart Security: Practices that Increase Business Profits is a part of Elsevier’s Security Executive Council Risk Management Portfolio, a collection of real world solutions and "how-to" guidelines that equip executives, practitioners, and educators with proven information for successful security and risk management programs.

  • Business Continuity State of the Industry Report

    • 1st Edition
    • Herbert J. Mattord + 1 more
    • English
    In the Business Continuity State of the Industry Report, authors Herbert Mattord and Michael Whitman provide a comprehensive overview of recent research and news related to business continuity programs. Using the most recent surveys, reports, and research data available, the authors provide an objective analysis of the state of business continuity today. The report covers events that have shaped the industry, including natural, economic, and technological disasters; the perspective of business continuity from top management executives; business continuity job descriptions and compensation data; the legal and regulatory environment; and emerging trends. It brings together what fragmented bits of information are currently available into one easy-to-read document. The Business Continuity State of the Industry Report is a part of Elsevier’s Security Executive Council Risk Management Portfolio, a collection of real world solutions and "how-to" guidelines that equip executives, practitioners, and educators with proven information for successful security and risk management programs.

  • Preparing for Next Generation Security Leader Opportunities

    • 1st Edition
    • Francis J. D'Addario
    • English
    Preparing for Next Generation Security Leader Opportunities is an excellent resource for the new or existing security leader who wants to prepare him or herself for the future of security. In this 30-minute Proven Practices presentation, narrator Francis D’Addario explains that traditional expectations of the security leader will soon merge with new requirements and measured performance. Organizations have come to expect leadership that is able to respond nimbly, communicate care, and galvanize resources. Also included in this presentation is a list of 16 performance criteria by which next generation security leadership can be measured. These criteria are based on Security Executive Council surveys and research from the Security Leadership Research Institute (SLRI). Preparing for Next Generation Security Leader Opportunities is a part of Elsevier’s Security Executive Council Risk Management Portfolio, a collection of real world solutions and "how-to" guidelines that equip executives, practitioners, and educators with proven information for successful security and risk management programs.

  • Developing a Comprehensive Security Program

    Elements, Characteristics, and Leadership
    • 1st Edition
    • Bob Hayes + 2 more
    • English
    Developing a Comprehensive Security Program answers the question common among security managers, "What is a model security program, and how does our program compare to it?" In this seven-minute Proven Practices presentation, narrator Elizabeth Lancaster outlines the baseline elements of a security program, which have been defined by experienced Security Executive Council members and research. This presentation is not sector-specific--mea... it's applicable for all organizations and industries. In addition to the baseline security program elements, Lancaster also discusses business-aligned program elements, program characteristics, a program maturity model, and the skills and knowledge the security department needs to possess. Developing a Comprehensive Security Program may be used as a benchmark for existing programs and to educate senior management. It also provides a general understanding of the security function as it currently exists. Developing a Comprehensive Security Program is a part of Elsevier's Security Executive Council Risk Management Portfolio, a collection of real world solutions and "how-to" guidelines that equip executives, practitioners, and educators with proven information for successful security and risk management programs.

  • Security Careers

    Skills, Compensation, and Career Paths
    • 3rd Edition
    • Stephen W. Walker + 1 more
    • English
    The third edition of Security Careers is the authoritative reference for current job descriptions and pay practices of security, compliance, and ethics occupations. The job descriptions and compensation ranges in this report are drawn from research from the Foushée Group, which has been conducting this research since 1980. Security Careers includes more than 75 job descriptions for security-related positions, which range from the entry-level security guard to the top global corporate executive. It also provides four years of compensation trend data to give a thorough understanding of competitive pay practices across the industry. This book can be used by anyone who manages security personnel or by security professionals who want to develop their careers. Security Careers is a part of Elsevier’s Security Executive Council Risk Management Portfolio, a collection of real world solutions and "how-to" guidelines that equip executives, practitioners, and educators with proven information for successful security and risk management programs.

  • Conflict Management for Security Professionals

    • 1st Edition
    • Andrew A. Tufano
    • English
    Effectively resolving conflict prevents violence, reduces incidents, improves productivity, and contributes to the overall health of an organization. Unlike the traditionally reactive law enforcement approach to resolving conflict, Conflict Management for Security Professionals provides a proven, reliable, business-focused approach that teaches security personnel to diffuse situations before they escalate when dealing with uncooperative, dangerous, or violent individuals. Covering everything from policies and procedures to security tactics and business impact, Conflict Management for Security Professionals uniquely addresses conflict resolution from a security perspective for managers, policy makers, security officials, or anyone else who interacts with people every day. This book helps organizations create and maintain safe environments without interfering with their ability to remain profitable, competitive, and relevant.

  • Security Risks in Social Media Technologies

    Safe Practices in Public Service Applications
    • 1st Edition
    • Alan Oxley
    • English
    Security measures can be used by management, IT staff, and users in participatory/collab... service provision within the public sector. Security Risks in Social Media Technologies explores this use. Topics are targeted, and issues raised and lessons learnt are analyzed. The book helps the reader understand the risks posed by relevant Web 2.0 applications and gives clear guidance on how to mitigate those risks. The body of the book is concerned with social media, the dominant Web 2.0 technology associated with security in the public sector, and is structured into eight chapters. The first chapter introduces the background for the work; the second covers uses of social media; the third covers relevant security threats; the fourth chapter concerns the security controls applied to the participation-collab... pattern; the fifth chapter then considers acceptable use practices; the sixth chapter covers participation-collab... in the context of schools; the seventh chapter shows an alternative way of classifying controls to that given in the fourth chapter; and the final chapter offers a conclusion.

  • Aligning Security Services with Business Objectives

    Proven Practices
    • 1st Edition
    • Richard Lefler
    • English
    Aligning Security Services with Business Objectives is a video presentation. Length: 42 minutes. Aligning Security Services with Business Objectives presents the ways in which security practitioners and executives can convey the value of security services to business leaders using measures and metrics. This 42-minute proven practices presentation also addresses how to develop and manage security programs that enhance profitability and the company’s ability to reduce shrinkage and loss. Presenter Richard Lefler, former vice president for worldwide security at American Express, defines the total cost of security services, broken down by fixed and variable costs, and points to example metrics that would demonstrate the business value of each service. This presentation is a valuable tool for security leaders working to align security with business goals as well as educators in the classroom. Aligning Security Services with Business Objectives is a part of Elsevier’s Security Executive Council Risk Management Portfolio, a collection of real world solutions and "how-to" guidelines that equip executives, practitioners, and educators with proven information for successful security and risk management programs.

  • Nine Practices of the Successful Security Leader

    Research Report
    • 1st Edition
    • Bob Hayes + 1 more
    • English
    Nine Practices of the Successful Security Leader lays out a series of best practices for security managers. Collected from interviews with security leaders at public and private sector organizations, ranging from small- and mid-size all the way up to large international entities, these practices are a sampling of what is vital and what works. Recommendations such as close communication with management, alignment of security agendas with business goals, and creating internal awareness programs are just some of the effective initiatives detailed in the report. With this information, security professionals can gain insight into the practices of their peers, measure their own success, and mentor junior colleagues. Nine Practices of the Successful Security Leader is a part of Elsevier’s Security Executive Council Risk Management Portfolio, a collection of real world solutions and "how-to" guidelines that equip executives, practitioners, and educators with proven information for successful security and risk management programs.

  • Crisis Management at the Speed of the Internet

    Trend Report
    • 1st Edition
    • Bob Hayes + 1 more
    • English
    Crisis Management at the Speed of the Internet provides security executives and practitioners with an overview of the potentially harmful impact of social media communication on corporate reputation. Within minutes, the online consumer community can propel a company into an image crisis, brand damage, and a financial disaster—even if the viral information isn’t factual. It is critical that an organization respond quickly and decisively to crises in online media. The report explores examples of companies that have experienced this kind of impact, and describes practical, strategic methods for mitigating and resolving a crisis, including cross-functional team readiness and internal communications training. It is a valuable resource for any security professional working to create or improve an existing corporate crisis management policy. Crisis Management at the Speed of the Internet is a part of Elsevier’s Security Executive Council Risk Management Portfolio, a collection of real world solutions and "how-to" guidelines that equip executives, practitioners, and educators with proven information for successful security and risk management programs.

  • Security and Loss Prevention

    An Introduction
    • 6th Edition
    • Philip Purpura
    • English
    The sixth edition of Security and Loss Prevention continues the tradition of providing introductory and advanced coverage of the body of knowledge of the security profession. To bridge theory to practice is the book’s backbone, and Philip Purpura continues this strong effort with new sidebars and text boxes presenting actual security challenges from real-life situations. Globally recognized and on the ASIS International Certified Protection Professional reading list, the sixth edition of Security and Loss Prevention enhances its position in the market as a comprehensive, interdisciplinary, and up-to-date treatment of the area, connecting the public and private sector and the worlds of physical security and technological security. Purpura once again demonstrates why students and professionals alike rely on this best-selling text as a timely, reliable resource encompassing the breadth and depth of considerations involved when implementing general loss prevention concepts and security programs within an organization.

  • Security Science

    The Theory and Practice of Security
    • 1st Edition
    • Clifton Smith + 1 more
    • English
    Security Science integrates the multi-disciplined practice areas of security into a single structured body of knowledge, where each chapter takes an evidence-based approach to one of the core knowledge categories. The authors give practitioners and students the underlying scientific perspective based on robust underlying theories, principles, models or frameworks. Demonstrating the relationships and underlying concepts, they present an approach to each core security function within the context of both organizational security and homeland security. The book is unique in its application of the scientific method to the increasingly challenging tasks of preventing crime and foiling terrorist attacks. Incorporating the latest security theories and principles, it considers security from both a national and corporate perspective, applied at a strategic and tactical level. It provides a rational basis for complex decisions and begins the process of defining the emerging discipline of security science.

  • Introduction to Security

    • 9th Edition
    • Robert Fischer + 2 more
    • English
    Introduction to Security has been the leading text on private security for over thirty years. Celebrated for its balanced and professional approach, this new edition gives future security professionals a broad, solid base that prepares them to serve in a variety of positions. Security is a diverse and rapidly growing field that is immune to outsourcing. The author team as well as an outstanding group of subject-matter experts combine their knowledge and experience with a full package of materials geared to experiential learning. As a recommended title for security certifications, and an information source for the military, this is an essential reference for all security professionals. This timely revision expands on key topics and adds new material on important issues in the 21st century environment such as the importance of communication skills; the value of education; internet-related security risks; changing business paradigms; and brand protection.

  • Practical Lock Picking

    A Physical Penetration Tester's Training Guide
    • 2nd Edition
    • Deviant Ollam
    • English
    Practical Lock Picking, Second Edition, is an instructional manual that covers everything from straightforward lockpicking to quick-entry techniques such as shimming, bumping, and bypassing. Written by Deviant Ollam, one of the security industry's best-known lockpicking teachers, and winner of the Best Book Bejtlich Read in 2010 award, this book contains detailed photos that make learning as easy as picking a lock. Material is offered in easy-to-follow lessons that allow even beginners to acquire the knowledge very quickly. Whether the student will be hired at some point to penetrate security or simply trying to harden his or her own defenses, this book is essential.This edition has been updated to reflect the changing landscape of tools and tactics which have emerged in recent years. It consists of 6 chapters that discuss topics such as the fundamentals of pin tumbler and wafer locks; the basics of picking, with emphasis on how to exploit weaknesses; tips for beginners on how to get very good and very fast in picking locks; advanced training; quick-entry tricks about shimming, bumping, and bypassing; and pin tumblers in other configurations.This book is geared specifically toward penetration testers, security consultants, IT security professionals, and hackers.

  • Keys to the Kingdom

    Impressioning, Privilege Escalation, Bumping, and Other Key-Based Attacks Against Physical Locks
    • 1st Edition
    • Deviant Ollam
    • English
    Lockpicking has become a popular topic with many in the security community. While many have chosen to learn the fine art of opening locks without keys, few people explore the fascinating methods of attack that are possible WITH keys. Keys to the Kingdom addresses the topics of impressioning, master key escalation, skeleton keys, and bumping attacks that go well beyond any treatment of these topics in the author’s previous book, Practical Lock Picking. This material is all new and focuses on locks currently in use as well as ones that have recently emerged on the market. Hackers and pen testers or persons tasked with defending their infrastructure and property from invasion will find these techniques uniquely valuable. As with Deviant Ollam’s previous book, Practical Lock Picking, Keys to the Kingdom includes full-color versions of all diagrams and photographs. Check out the companion website which includes instructional videos that provide readers with a full-on training seminar from the author.

  • Cyber Attacks

    Protecting National Infrastructure, STUDENT EDITION
    • 1st Edition
    • Edward Amoroso
    • English
    Cyber Attacks, Student Edition, offers a technical, architectural, and management approach to solving the problems of protecting national infrastructure. This approach includes controversial themes such as the deliberate use of deception to trap intruders. This volume thus serves as an attractive framework for a new national strategy for cyber security. A specific set of criteria requirements allows any organization, such as a government agency, to integrate the principles into their local environment. In this edition, each principle is presented as a separate security strategy and illustrated with compelling examples. The book adds 50-75 pages of new material aimed specifically at enhancing the student experience and making it more attractive for instructors teaching courses such as cyber security, information security, digital security, national security, intelligence studies, technology and infrastructure protection. It now also features case studies illustrating actual implementation scenarios of the principles and requirements discussed in the text, along with a host of new pedagogical elements, including chapter outlines, chapter summaries, learning checklists, and a 2-color interior. Furthermore, a new and complete ancillary package includes test bank, lesson plans, PowerPoint slides, case study questions, and more. This text is intended for security practitioners and military personnel as well as for students wishing to become security engineers, network operators, software designers, technology managers, application developers, etc.

  • Risk Analysis and the Security Survey

    • 4th Edition
    • James F. Broder + 1 more
    • English
    As there is a need for careful analysis in a world where threats are growing more complex and serious, you need the tools to ensure that sensible methods are employed and correlated directly to risk. Counter threats such as terrorism, fraud, natural disasters, and information theft with the Fourth Edition of Risk Analysis and the Security Survey. Broder and Tucker guide you through analysis to implementation to provide you with the know-how to implement rigorous, accurate, and cost-effective security policies and designs. This book builds on the legacy of its predecessors by updating and covering new content. Understand the most fundamental theories surrounding risk control, design, and implementation by reviewing topics such as cost/benefit analysis, crime prediction, response planning, and business impact analysis--all updated to match today's current standards. This book will show you how to develop and maintain current business contingency and disaster recovery plans to ensure your enterprises are able to sustain loss are able to recover, and protect your assets, be it your business, your information, or yourself, from threats.

  • Introduction to Homeland Security

    Principles of All-Hazards Risk Management
    • 4th Edition
    • George Haddow + 2 more
    • English
    Bullock, Haddow, and Coppola have set the standard for homeland security textbooks, and they follow up their #1-selling third edition with this substantially improved version. Students will value the decades of experience that the authors bring to their analysis, and the new edition offers still more research-based data to balance the field-tested practical information included in each chapter. Additionally, links to the most current online government information help to keep the text up-to-date in this rapidly developing field. As with its predecessors, the book clearly delineates the bedrock principles of preparing for, mitigating, managing, and recovering from emergencies and disasters. However, this new edition emphasizes their value with improved clarity and focus. NEW TO THIS EDITION: This edition has been thoroughly revised to include changes that are based both on changes relevant to the political, budgetary, and legal aspects of homeland security that have changed since the 2008 Presidential election (and subsequent change in the administration), but also in recognition of an expanding academic demand that is both larger in size and changing in scope (most notably with regard to an increase in the number of government employees and officials who are taking courses that have adopted the text). These include: an expansion of material on the organization of the Department of Homeland Security; strategic and philosophical changes that are recommended and/or that have occurred as a result of the Quadrennial Homeland Security Review completed in 2010; updated budgetary information on both homeland security programs and on the homeland security grants that have supported safety and security actions at the state and local levels, as well as in the private sector; and changes in the way the public perceives and receives information about security risk, including the possible elimination of the Homeland Security Advisory System.

  • Private Security and the Law

    • 4th Edition
    • Charles Nemeth
    • English
    Private Security and the Law, Fourth Edition, is a unique resource that provides a comprehensive analysis of practices in the security industry as they relate to law, regulation, licensure, and constitutional questions of case and statutory authority. It is an authoritative, scholarly treatise that serves as a solid introduction for students regarding the legal and ethical standards that shape the industry. The book takes you step-by-step through the analysis of case law as it applies to situations commonly faced by security practitioners. It describes the legal requirements faced by security firms and emphasizes the liability problems common to security operations, including negligence and tortious liability, civil actions frequently litigated, and strategies to avoid legal actions that affect business efficiency. It also examines the constitutional and due-process dimensions of private security both domestically and internationally, including recent cases and trends that are likely to intensify in the future. New features of this edition include: a chapter on the legal implications of private contractors operating in war zones like Afghanistan; updated coverage of statutory authority, as well as state and federal processes of oversight and licensure; and special analysis of public-private cooperative relationships in law enforcement. A historical background helps readers understand the present by seeing the full context of recent developments. This book will appeal to: students in physical security, security management, and criminal justice programs in traditional and for-profit schools; security professionals; and those working in law enforcement.

  • Thor's Microsoft Security Bible

    A Collection of Practical Security Techniques
    • 1st Edition
    • Timothy "Thor" Mullen
    • English
    Thor's Microsoft Security Bible provides a one-stop-shop for Microsoft-related security techniques and procedures as applied to the typical deployment of a Microsoft-based infrastructure. Written by world-renowned security expert Timothy Thor Mullen, the book presents a fascinating collection of practical and immediately implementable Microsoft security techniques, processes and methodologies uniquely illustrated through real-world process examples. This book contains detailed security concepts and methodologies described at every level: Server, Client, Organizational Structure, Platform-specific security options, and application specific security (IIS, SQL, Active Directory, etc.). It also includes new, never-before-publish... security tools complete with source code; detailed technical information on security processes for all major Microsoft applications; unique project-based storytelling delivery, combining multiple security techniques and methods together for real-world solutions to security challenges in actual business use cases; reference-style content for access to specific application security techniques and methods; actual author opinion and guidance as not only HOW to go about security particular applications, but WHY to do so. This book will be of interest to systems and network administrators, IT managers, security and network engineers, and database administrators.

  • Effective Security Management

    • 5th Edition
    • Charles A. Sennewald
    • English
    Effective Security Management, 5e, teaches practicing security professionals how to build their careers by mastering the fundamentals of good management. Charles Sennewald brings a time-tested blend of common sense, wisdom, and humor to this bestselling introduction to workplace dynamics. Working with a team of sterling contributors endowed with cutting-edge technological expertise, the book presents the most accurately balanced picture of a security manager’s duties. Its Jackass Management cartoons also wittily illustrate the array of pitfalls a new manager must learn to avoid in order to lead effectively. In short, this timely revision of a classic text retains all the strengths that have helped the book endure over the decades and adds the latest resources to support professional development.

  • Contemporary Security Management

    • 3rd Edition
    • John Fay
    • English
    Contemporary Security Management, Third Edition teaches security professionals how to operate an efficient security department and how to integrate smoothly with other groups inside and outside their own organizations. Fay demonstrates the specifics of security management: how to organize, plan, develop and manage a security operation. how to identify vulnerabilities. how to determine the protective resources required to offset threats. how to implement all necessary physical and IT security measures. Security professionals share the responsibility for mitigating damage, serving as a resource to an Emergency Tactical Center, assisting the return of business continuity, and liaising with local response agencies such as police and fire departments, emergency medical responders, and emergency warning centers. At the organizational level, the book addresses budgeting, employee performance, counseling, hiring and termination, employee theft and other misconduct, and offers sound advice on building constructive relationships with organizational peers and company management.

  • Seven Deadliest Social Network Attacks

    • 1st Edition
    • Carl Timm + 1 more
    • English
    Seven Deadliest Social Network Attacks describes the seven deadliest social networking attacks and how to defend against them. This book pinpoints the most dangerous hacks and exploits specific to social networks like Facebook, Twitter, and MySpace, and provides a comprehensive view into how such attacks have impacted the livelihood and lives of adults and children. It lays out the anatomy of these attacks, including how to make your system more secure. You will discover the best ways to defend against these vicious hacks with step-by-step instruction and learn techniques to make your computer and network impenetrable. The book is separated into seven chapters, with each focusing on a specific type of attack that has been furthered with social networking tools and devices. These are: social networking infrastructure attacks; malware attacks; phishing attacks; Evil Twin Attacks; identity theft; cyberbullying; and physical threat. Each chapter takes readers through a detailed overview of a particular attack to demonstrate how it was used, what was accomplished as a result, and the ensuing consequences. In addition to analyzing the anatomy of the attacks, the book offers insights into how to develop mitigation strategies, including forecasts of where these types of attacks are heading. This book can serve as a reference guide to anyone who is or will be involved in oversight roles within the information security field. It will also benefit those involved or interested in providing defense mechanisms surrounding social media as well as information security professionals at all levels, those in the teaching profession, and recreational hackers.

  • Seven Deadliest USB Attacks

    • 1st Edition
    • Brian Anderson + 1 more
    • English
    Seven Deadliest USB Attacks provides a comprehensive view of the most serious types of Universal Serial Bus (USB) attacks. While the book focuses on Windows systems, Mac, Linux, and UNIX systems are equally susceptible to similar attacks. If you need to keep up with the latest hacks, attacks, and exploits effecting USB technology, then this book is for you. This book pinpoints the most dangerous hacks and exploits specific to USB, laying out the anatomy of these attacks including how to make your system more secure. You will discover the best ways to defend against these vicious hacks with step-by-step instruction and learn techniques to make your computer and network impenetrable. The attacks outlined in this book are intended for individuals with moderate Microsoft Windows proficiency. The book provides the tools, tricks, and detailed instructions necessary to reconstruct and mitigate these activities while peering into the risks and future aspects surrounding the respective technologies. There are seven chapters that cover the following: USB Hacksaw; the USB Switchblade; viruses and malicious codes; USB-based heap overflow; the evolution of forensics in computer security; pod slurping; and the human element of security, including the risks, rewards, and controversy surrounding social-engineering engagements. This book was written to target a vast audience including students, technical staff, business leaders, or anyone seeking to understand fully the removable-media risk for Windows systems. It will be a valuable resource for information security professionals of all levels, as well as web application developers and recreational hackers.

  • Seven Deadliest Unified Communications Attacks

    • 1st Edition
    • Dan York
    • English
    Seven Deadliest Unified Communications Attacks provides a comprehensive coverage of the seven most dangerous hacks and exploits specific to Unified Communications (UC) and lays out the anatomy of these attacks including how to make your system more secure. You will discover the best ways to defend against these vicious hacks with step-by-step instruction and learn techniques to make your computer and network impenetrable. The book describes the intersection of the various communication technologies that make up UC, including Voice over IP (VoIP), instant message (IM), and other collaboration technologies. There are seven chapters that focus on the following: attacks against the UC ecosystem and UC endpoints; eavesdropping and modification attacks; control channel attacks; attacks on Session Initiation Protocol (SIP) trunks and public switched telephone network (PSTN) interconnection; attacks on identity; and attacks against distributed systems. Each chapter begins with an introduction to the threat along with some examples of the problem. This is followed by discussions of the anatomy, dangers, and future outlook of the threat as well as specific strategies on how to defend systems against the threat. The discussions of each threat are also organized around the themes of confidentiality, integrity, and availability. This book will be of interest to information security professionals of all levels as well as recreational hackers.

  • Seven Deadliest Wireless Technologies Attacks

    • 1st Edition
    • Brad Haines
    • English
    Seven Deadliest Wireless Technologies Attacks provides a comprehensive view of the seven different attacks against popular wireless protocols and systems. This book pinpoints the most dangerous hacks and exploits specific to wireless technologies, laying out the anatomy of these attacks, including how to make your system more secure. You will discover the best ways to defend against these vicious hacks with step-by-step instruction and learn techniques to make your computer and network impenetrable. Each chapter includes an example real attack scenario, an analysis of the attack, and methods for mitigating the attack. Common themes will emerge throughout the book, but each wireless technology has its own unique quirks that make it useful to attackers in different ways, making understanding all of them important to overall security as rarely is just one wireless technology in use at a home or office. The book contains seven chapters that cover the following: infrastructure attacks, client attacks, Bluetooth attacks, RFID attacks; and attacks on analog wireless devices, cell phones, PDAs, and other hybrid devices. A chapter deals with the problem of bad encryption. It demonstrates how something that was supposed to protect communications can end up providing less security than advertised. This book is intended for information security professionals of all levels, as well as wireless device developers and recreational hackers.

  • Seven Deadliest Microsoft Attacks

    • 1st Edition
    • Rob Kraus + 3 more
    • English
    Seven Deadliest Microsoft Attacks explores some of the deadliest attacks made against Microsoft software and networks and how these attacks can impact the confidentiality, integrity, and availability of the most closely guarded company secrets. If you need to keep up with the latest hacks, attacks, and exploits effecting Microsoft products, this book is for you. It pinpoints the most dangerous hacks and exploits specific to Microsoft applications, laying out the anatomy of these attacks including how to make your system more secure. You will discover the best ways to defend against these vicious hacks with step-by-step instruction and learn techniques to make your computer and network impenetrable.The book consists of seven chapters that cover the seven deadliest attacks against Microsoft software and networks: attacks against Windows passwords; escalation attacks; stored procedure attacks; mail service attacks; client-side ActiveX and macro attacks; Web service attacks; and multi-tier attacks. Each chapter provides an overview of a single Microsoft software product, how it is used, and some of the core functionality behind the software. Furthermore, each chapter explores the anatomy of attacks against the software, the dangers of an attack, and possible defenses to help prevent the attacks described in the scenarios.This book will be a valuable resource for those responsible for oversight of network security for either small or large organizations. It will also benefit those interested in learning the details behind attacks against Microsoft infrastructure, products, and services; and how to defend against them. Network administrators and integrators will find value in learning how attacks can be executed, and transfer knowledge gained from this book into improving existing deployment and integration practices.

  • Network and System Security

    • 1st Edition
    • John Vacca
    • English
    Network and System Security provides focused coverage of network and system security technologies. It explores practical solutions to a wide range of network and systems security issues. Chapters are authored by leading experts in the field and address the immediate and long-term challenges in the authors’ respective areas of expertise. Coverage includes building a secure organization; cryptography; system intrusion; UNIX and Linux security; Internet security, intranet security; LAN security; wireless network security; cellular network security, RFID security, and more. This compilation of 13 chapters is tightly focused and ideally suited as an essential desk reference in this high-growth subject area.