Agile Information Security: Using Scrum to Survive In and Secure a Rapidly Changing Environment

In Agile Information Security, James Fitzer provides sound guidance and examples on working agility into your information security process, using Scrum as a framework, and lessons learned from the Northern Border Integration Demonstration, a high-profile U.S. Border Security project. You will find advice, examples, and team-building concepts designed to make your information security program more effective by trimming the fat from your security process and learning to thrive on change. More importantly, you’ll find ways to return your information security program to the basics: protecting your organization’s assets and supporting the enterprise. In a world of increasing bloat and bureaucracy, the simple approach to a “working product” is a welcome breath of fresh air.

Table of Contents

• Introduction
• The Agile Philosophy
• Scrum for Information Security
• Security Risk Assessments
• What is Acceptable Risk?
• Compliance and Agility
• Implementing Controls, Prevention, Monitoring, and Response
• Final Thoughts
• Bibliography
• About the Author