Jones & Bartlett Learning Managing Risk in Information Systems

Paperback Navigate eBook Access Managing Risk in Information Systems, Fourth Edition equips future professionals with the knowledge and confidence to safeguard data, processes, and technology in an era of evolving threats and regulatory demands. Updates address the growing complexity of cybersecurity and standards-based risk management across modern IT infrastructures by breaking down risk fundamentals into clear, actionable steps. Students learn to identify threats, vulnerabilities, and exploits and to master risk assessment methodologies and mitigation strategies through structured chapters and real-world examples. Beyond theory, the Fourth Edition emphasizes hands-on application through exercises, case studies, and planning activities that prepare students for real-world challenges. Students gain the skills to develop risk management plans, perform business impact analyses, and implement security controls across organizational environments. Designed for undergraduate and graduate IT and cybersecurity programs, aligning instruction with widely recognized standards and frameworks such as GDPR, COBIT, CVE, and NIST. Features and Benefits - Provides comprehensive coverage of IT risk management, including risk assessment, mitigation planning, and compliance concepts. - Uses a clear, structured chapter approach to simplify complex risk frameworks and support consistent learning outcomes. - Integrates hands-on exercises and case studies that help students apply risk management concepts to real-world scenarios. - Teaches students how to identify threats, vulnerabilities, and exploits across modern information systems environments. - Prepares students to develop risk management plans, perform business impact analyses, and implement security controls. - Supports compliance-focused instruction aligned with leading standards and frameworks, including GDPR, COBIT, CVE, and NIST. - Instructor Resources: Content Mapping, Instructor Manual, PowerPoint Slides, Project, Syllabus, Test Bank, and Time on Task.