Information Governance

Gain confidence in regulatory compliance, drive effective infotech investment, and uplift organizational knowledge for effective data governance. Based on the authors’ extensive experience and reinforced with case studies, this book presents their award-winning framework of business tools and techniques. It provides a 4-point strategy for achieving business-driven information governance aligned with business risk management to ensure the delivery of quality and reliable information. Master a structured approach to sharing knowledge and defining business terms by removing ambiguous ...

Are you ready to revolutionize your organization’s approach to cybersecurity and learn GRC? In a world where threats evolve faster than ever, achieving robust Governance, Risk Management, and Compliance (GRC) is no longer optional—it’s essential. Yet, countless organizations struggle to bridge the gap between lofty compliance standards and practical implementation. Imagine having a proven roadmap that transforms the complexities of cybersecurity frameworks into a clear, actionable plan tailored to your organization’s unique needs while giving you a practical understanding of GRC. ...

If CISSP feels like a wall of terms, this book turns it into a system you can actually use. The CISSP exam rewards judgment, priorities, and risk-based decision-making. This guide helps you think the way CISSP expects across all eight domains, without drowning you in fluff. What you’ll get inside: Clear, plain-English explanations of core CISSP concepts Mental models that connect the domains so the material stops feeling random The CISSP manager mindset: risk, policy, governance, and business impact How to spot what the question is really asking Common traps and why smart people miss them...

If you are preparing for the ISACA CISA exam and juggling a full schedule, you need an approach that is focused, practical, and repeatable. CISA For Busy People is built to help you study with purpose. It emphasizes exam-ready decision making across the CISA domains, using clear explanations and realistic audit context so you can retain what matters and answer confidently. What you will get in this book: A practical roadmap for how to think through CISA-style questions Plain-language explanations of audit, risk, and control concepts Guidance on audit planning, fieldwork, evidence, and ...

Organizations need governance documents; those policies, procedures, and other written rules that tell the organization and employees what to do and how to do it. These documents are an important part of management to help the organization comply with legal requirements, accomplish its mission, and run efficiently. Policies have legal significance and are the first things requested by a government regulator or civil plaintiff—they could be Exhibit 1 in a lawsuit. Or they could be quality documents that keep your organization’s practices in compliance and avoid a lawsuit in the first ...

We’re often told that disinformation is everywhere and that it’s endangering our democracy. But what if the war on disinformation itself is really just a weapon to squash any and all legitimate dissent? This program is read by the author. The Information State is an incisive examination of...

You do not need more notes. You need repetition that sticks. This CISSP flashcards companion is built for one job: helping you review the concepts that need to stay active in your memory. When your schedule is full and your study time comes in short bursts, long explanations are not always the best fit. Sometimes you need fast review, repeated exposure, and a simple way to keep moving through the material without losing momentum. That is exactly what this book is designed to do. It gives you quick, focused review across the CISSP domains so you can reinforce key terms, core ideas, and high-...

If you are studying for CISM, you are preparing for an exam that evaluates leadership and decision-making, not hands-on troubleshooting. It expects you to think like an information security manager: set direction through governance, evaluate risk in business terms, build and run a program that delivers measurable outcomes, and respond to incidents in a way that strengthens the organization over time. Many candidates find CISM challenging because the answer that feels most “correct” in the real world is not always the best answer on the exam. The exam is testing priority, process, and ...

Cybersecurity is often taught as a collection of tools, configurations, and technical practices. This book takes a different approach. Rather than focusing on technologies or step-by-step implementation, Cybersecurity Fundamentals presents cybersecurity as a structured discipline — built on concepts, principles, and frameworks that define how security is understood, organized, and applied in real-world environments. At its core, this book is about thinking correctly about cybersecurity. It connects essential domains such as privacy, information security, regulatory frameworks, and ...

ISO 27001: Compliance in Action Transforming Policies into Practical, Lasting Security Solutions In today's world, where data breaches and cyber threats are on the rise, ISO 27001: Compliance in Action is your ultimate hands-on guide to implementing, monitoring, and sustaining an effective Information Security Management System (ISMS). This book bridges the gap between policy creation and practical application, providing step-by-step strategies to help organizations build lasting security solutions. What You'll Learn: ✔️ Comprehensive Implementation: Turn ISO 27001 requirements into ...

Conquer the AHIMA RHIA Exam delivers a fast-paced, audiobook-friendly review of the essential knowledge required for success as a Registered Health Information Administrator. In under ninety minutes, this focused guide explains the full scope of health information management—combining data governance, compliance, leadership, and informatics into one seamless overview. This concise study resource covers every major RHIA domain, including information governance, health data management, analytics, privacy and security, revenue cycle oversight, regulatory compliance, and organizational ...

One day, everything is working. The dashboards are green. Revenue is climbing. Investors are happy. Then—without warning—everything breaks. Not because of the market. Not because of competition. But because of a decision you didn’t know you were making. Most companies don’t fail from bad strategy. They fail from invisible technology decisions made years earlier—quietly, rationally, and delegated to “someone technical.” Master of Information Technology is not a book about coding. It is a field manual for modern power. Written for CEOs, founders, VPs, board members, and senior ...

"Information Security for CRO: Master Cyber Risk in Just 6 Hours!" is a crucial resource for Chief Risk Officers and senior leaders navigating the increasingly complex landscape of cybersecurity. Designed as an executive-level guide, it provides a fast-paced and efficient learning journey, condensing years of cybersecurity expertise into approximately six hours of focused study. This allows CROs to quickly grasp essential concepts and implement practical strategies for mitigating cyber risks, all while avoiding technical overload. The book equips readers with actionable insights and ...

CCISO is a leadership exam. It measures whether you can make executive-level security decisions under constraints, communicate risk clearly, and run a security program that aligns to business outcomes. CCISO For Busy People helps you study with purpose by focusing on how the exam is written and what “best answer” really means in governance-heavy scenarios. What you will get in this book: A practical, decision-first walkthrough of the CCISO exam domains Plain-English explanations designed for short study sessions Scenario-driven practice that mirrors executive tradeoffs and ...

In "The CISO's guide to Surviving Machiavellian Politics", Russell D. Nomer, CISSP draws upon the combination of academic lessons and his own unique experiences and observations to share lessons learned from: Over three decades of technology and security consulting spanning multiple industries Studying Political Communications, Political Science and Politics & Values at The George Washington University Completing Morton Blackwell Leadership Institute Training Obtaining a Bachelor of Science Degree with honors in Security Systems from SUNY Farmingdale Obtaining a CISSP Obtaining ITIL ...

In The End of the Universal Internet: A New Era of Isolated National Networks, Bernd Riemann provides a rigorous empirical analysis of the structural transformation currently redefining global digital infrastructure. While the Internet was historically conceptualized as a borderless network capable of transcending territorial sovereignty, Riemann demonstrates through extensive research that the operational reality of the twenty-first century is characterized by progressive fragmentation across infrastructural, regulatory, and informational dimensions. By moving beyond theoretical ...

What Is Data Governance? A Short and Practical Guide to Managing Data Quality, Ownership, and Compliance in the AI Era You don’t need to be a tech expert to care about data governance. You need to care about decisions. In an era where data fuels every department, dashboard, and business decision, organizations can no longer afford to “wing it.” Poor data quality. Conflicting KPIs. Compliance risks. Confused teams. Sound familiar? That’s why data governance isn’t just an IT topic—it’s a business essential. In this clear, insightful, and beginner-friendly guide, the book cuts ...

Navigating the complex terrain of SOC2 compliance can be a daunting task. "A Step-by-Step Guide to SOC2 Type 1 Attestation and Type 2 Certification" is your trusted companion on this journey, offering a comprehensive, accessible, and practical roadmap to achieving and maintaining SOC2 compliance. Penned by renowned information security expert, Russell D. Nomer, CISSP, this guide leverages over 30 years of experience and delivers invaluable insights in an engaging and reader-friendly manner. From understanding the importance of SOC2 attestation to conducting successful audits and mitigating ...

If you’re aiming for GIAC GSLC, you already know the problem: the exam expects leadership-level understanding, but your calendar expects you to be everywhere at once. GSLC For Busy People is written for professionals who need a focused path that respects work demands, family time, and limited study windows. This book helps you build the kind of security-leadership reasoning the exam looks for: clear governance choices, defensible risk decisions, useful metrics, and practical program execution. You won’t find hype or shortcuts here. You’ll find a structured way to learn, review, and ...

This book is written for experienced security professionals, managers, architects, and aspiring Chief Information Security Officers who already understand technical security concepts but struggle with executive-level thinking, governance clarity, and exam relevance. Many CCISO candidates find that existing study guides are either too technical, too shallow, or disconnected from how security leadership actually works at the board and C-suite level. If you are preparing for the EC-Council CCISO certification and want a study guide that speaks the language of executives rather than engineers, ...