David Sutton - Information Risk Management, Second edition

BCS Learning and Development Ltd 2021

The right of David Sutton to be identified as author of this work has been asserted by him in accordance with sections 77 and 78 of the Copyright, Designs and Patents Act 1988.

All rights reserved. Apart from any fair dealing for the purposes of research or private study, or criticism or review, as permitted by the Copyright Designs and Patents Act 1988, no part of this publication may be reproduced, stored or transmitted in any form or by any means, except with the prior permission in writing of the publisher, or in the case of reprographic reproduction, in accordance with the terms of the licences issued by the Copyright Licensing Agency. Enquiries for permission to reproduce material outside those terms should be directed to the publisher.

All trade marks, registered names etc. acknowledged in this publication are the property of their respective owners. BCS and the BCS logo are the registered trade marks of the British Computer Society charity number 292786 (BCS).

Published by BCS Learning and Development Ltd, a wholly owned subsidiary of BCS, The Chartered Institute for IT, 3 Newbridge Square, Swindon, SN1 1BY, UK.

www.bcs.org

Paperback ISBN: 978-1-78017-5720

PDF ISBN: 978-1-78017-5744

ePUB ISBN: 978-1-78017-5751

British Cataloguing in Publication Data.

A CIP catalogue record for this book is available at the British Library.

Disclaimer:

The views expressed in this book are of the authors and do not necessarily reflect the views of the Institute or BCS Learning and Development Ltd except where explicitly stated as such. Although every care has been taken by the authors and BCS Learning and Development Ltd in the preparation of the publication, no warranty is given by the authors or BCS Learning and Development Ltd as publisher as to the accuracy or completeness of the information contained within it and neither the authors nor BCS Learning and Development Ltd shall be responsible or liable for any loss or damage whatsoever arising by virtue of such information or any instructions or advice contained within this publication or by any of the aforementioned.

All URLs were correct at the time of publication.

Publishers acknowledgements

Reviewers: Andrea Simmons

Publisher: Ian Borthwick

Commissioning editor: Rebecca You

Production manager: Florence Leroy

Project manager: Sunrise Setting Ltd

Copy-editor: The Business Blend Ltd

Proofreader: Barbara Eastman

Indexer: Matthew Gale

Cover design: Alex Wright

Cover image: Shutterstock/Pat-s-pictures

Typeset by Lapiz Digital Services, Chennai, India

BCS, THE CHARTERED INSTITUTE FOR IT

BCS, The Chartered Institute for IT, is committed to making IT good for society. We use the power of our network to bring about positive, tangible change. We champion the global IT profession and the interests of individuals, engaged in that profession, for the benefit of all.

Exchanging IT expertise and knowledge

The Institute fosters links between experts from industry, academia and business to promote new thinking, education and knowledge sharing.

Supporting practitioners

Through continuing professional development and a series of respected IT qualifications, the Institute seeks to promote professional practice tuned to the demands of business. It provides practical support and information services to its members and volunteer communities around the world.

Setting standards and frameworks

The Institute collaborates with government, industry and relevant bodies to establish good working practices, codes of conduct, skills frameworks and common standards. It also offers a range of consultancy services to employers to help them adopt best practice.

Become a member

Over 70,000 people including students, teachers, professionals and practitioners enjoy the benefits of BCS membership. These include access to an international community, invitations to a roster of local and national events, career development tools and a quarterly thought-leadership magazine. Visit www.bcs.org/membership to find out more.

Further information

BCS, The Chartered Institute for IT,

3 Newbridge Square,

Swindon, SN1 1BY, United Kingdom.

T +44 (0) 1793 417 417

(Monday to Friday, 09:00 to 17:00 UK time)

www.bcs.org/contact

http://shop.bcs.org/

While updating this book, the UK was locked down due to the coronavirus SARS-CoV-2, and we were unable to leave home except for food shopping, essential exercise or medical needs. This gave me the opportunity to concentrate fully on the book instead of the usual procrastination and finding other things to do, even though there was a long list.

What struck me above all else was the dedication and sheer determination shown by many people. In particular, doctors, nurses, carers, hospital staff, police and ambulance drivers, who as front-line responders put their lives on the line to save others, and some of whom unfortunately lost their lives in doing so. But many others did not receive the same recognition and deserve a mention shop workers, who made sure that we could buy essential items (even if some were in short supply for a while); the people producing our food and essential needs; delivery drivers, who made sure the shops and supermarkets were stocked; refuse and recycling collectors; transport workers, who kept the country moving all of whom who carried on their daily work despite the risks and often without proper thanks.

Friends, neighbours and frequently total strangers rallied round to make sure that the elderly and the less able continued to receive food and essential medication or just to have a telephone call with another human being while in isolation.

Groups of individuals began making personal protective equipment for front-line staff who lacked it, often paying for the materials out of their own pockets or crowdfunding money for the resources they needed.

All these unselfish people did what they did without being asked to do so, and demonstrated just how much a crisis can bring communities together, and bring out the best in the human race.

Many of these people are underpaid and undervalued, and I hope that if nothing else comes of this, they will receive the recognition they so rightly deserve, and it is to all of the above that I would like to dedicate this book.

David Suttons career spans more than 55 years and includes radio transmission, international telephone switching, computing, voice and data networking, structured cabling systems, information security and critical information infrastructure protection.

He joined Cellnet (now Telefnica UK) in 1993, where he was responsible for ensuring the continuity and restoration of the core cellular and broadband networks, and represented the company in the electronic communications industrys national resilience forum. In December 2005 he gave evidence to the Greater London Authority enquiry into the mobile telecoms impact of the London bombings.