Governing Security investigates the surprising history of two major federal agencies that touch the lives of Americans every day: the Roosevelt-era Federal Security Agency––which eventually became today's Department of Health and Human Services––and the more recently created Department of Homeland Security. By describing the legal, political, and institutional history of both organizations, Mariano-Florentino Cuéllar offers a compelling account of crucial developments affecting the basic architecture of our nation. He shows how Americans end up choosing security goals not through an elaborate technical process, but in lively and overlapping settings involving conflict over statutory programs, agency autonomy, presidential power, and priorities for domestic and international risk regulation. Ultimately, as Cuéllar shows, ongoing fights about the scope of national security reshape the very structure of government and the intricate process through which statutes and regulations are implemented, particularly during––or in anticipation of––a national crisis.

"This book explores the political dilemmas around security forces in war-torn countries. Well-governed military and police forces are central to sustained peace after civil war, and efforts to restructure security forces are major components of peacebuilding and stabilization efforts. As international actors have attempted to strengthen oversight and curb abuse, however, they have run into thorny political obstacles. Varied outcomes have raised questions about the value of international assistance for strengthening state institutions"--

The Growing Imperative Need for Effective Information Security Governance With monotonous regularity, headlines announce ever more spectacular failures of information security and mounting losses. The succession of corporate debacles and dramatic control failures in recent years underscores the necessity for information security to be tightly integrated into the fabric of every organization. The protection of an organization's most valuable asset information can no longer be relegated to low-level technical personnel, but must be considered an essential element of corporate governance that is critical to organizational success and survival. Written by an industry expert, Information Security Governance is the first book-length treatment of this important topic, providing readers with a step-by-step approach to developing and managing an effective information security program. Beginning with a general overview of governance, the book covers: The business case for information security Defining roles and responsibilities Developing strategic metrics Determining information security outcomes Setting security governance objectives Establishing risk management objectives Developing a cost-effective security strategy A sample strategy development The steps for implementing an effective strategy Developing meaningful security program development metrics Designing relevant information security management metrics Defining incident management and response metrics Complemented with action plans and sample policies that demonstrate to readers how to put these ideas into practice, Information Security Governance is indispensable reading for any professional who is involved in information security and assurance.

The Handbook is divided into four sections which examine, in turn: the emergence, evolution, and forms of security governance, as well as the theoretical orientations that have so far dominated the literature (networks, multilateralism, regimes, and sy

IT Security governance is becoming an increasingly important issue for all levels of a company. IT systems are continuously exposed to a wide range of threats, which can result in huge risks that threaten to compromise the confidentiality, integrity, and availability of information. This book will be of use to those studying information security, as well as those in industry.

This book examines a series of questions associated with the increasing application and implications of biometrics in contemporary everyday life. In the wake of the events of 9/11, the reliance on increasingly sophisticated and invasive technologies across a burgeoning field of applications has accelerated, giving rise to the term 'biometric state'. This book explores how these ‘virtual borders’ are created and the effect they have upon the politics of citizenship and immigration, especially how they contribute to the treatment of citizens as suspects. Finally and most importantly, this text argues that the rationale of 'governing through risk' facilitates pre-emptory logics, a negligent attitude towards 'false positives', and an overall proliferation of borders and ubiquitous risk, which becomes integral to contemporary everyday life, far beyond the confined politics of national borders and frontiers. By focusing on specific sites, such as virtual borders in airports, trusted traveller programs like the NEXUS program and those delivered by airlines and supported by governmental authorities (TSA and CATSA respectively), this book raises critical questions about the emerging biometric state and its commitment and constitution vis-à-vis technology of ‘governing through risk’. This book will be of interest to students of biopolitics, critical security, surveillance studies and International Relations in general. Benjamin J. Muller is assistant professor in International Relations at Simon Fraser University, Burnaby, Canada. He completed his PhD in the School of Politics and International Studies at Queen’s University Belfast, Northern Ireland, in 2005.

The threats the world currently faces extend beyond traditional problems such as major power competition, interstate conflict, and nuclear proliferation. Non-traditional security challenges such as climate change, migration, and natural disasters surpass states’ capacity to address them. These limitations have led to the proliferation of other actors—regional and international organizations, transnational networks, local and international nongovernmental organizations—that fill the gaps when states’ responses are lacking and provide security in places where there is none. In this book, Mely Caballero-Anthony examines how non-traditional security challenges have changed state behavior and security practices in Southeast Asia and the wider East Asia region. Referencing the wide range of transborder security threats confronting Asia today, she analyzes how non-state actors are taking on the roles of “security governors,” engaging with states, regional organizations, and institutional frameworks to address multifaceted problems. From controlling the spread of pandemics and transboundary pollution, to managing irregular migration and providing relief and assistance during humanitarian crises, Caballero-Anthony explains how and why non-state actors have become crucial across multiple levels—local, national, and regional—and how they are challenging regional norms and reshaping security governance. Combining theoretical discussions on securitization and governance with a detailed and policy-oriented analysis of important recent developments, Negotiating Governance on Non-Traditional Security in Southeast Asia and Beyond points us toward “state-plus” governance, where a multiplicity of actors form the building blocks for multilateral cooperative security processes to meet future global challenges.

Information Governance and Security shows managers in any size organization how to create and implement the policies, procedures and training necessary to keep their organization’s most important asset—its proprietary information—safe from cyber and physical compromise. Many intrusions can be prevented if appropriate precautions are taken, and this book establishes the enterprise-level systems and disciplines necessary for managing all the information generated by an organization. In addition, the book encompasses the human element by considering proprietary information lost, damaged, or destroyed through negligence. By implementing the policies and procedures outlined in Information Governance and Security, organizations can proactively protect their reputation against the threats that most managers have never even thought of. Provides a step-by-step outline for developing an information governance policy that is appropriate for your organization Includes real-world examples and cases to help illustrate key concepts and issues Highlights standard information governance issues while addressing the circumstances unique to small, medium, and large companies

Examines the governance challenges of cybersecurity through twelve, real-world case studies Through twelve detailed case studies, this superb collection provides an overview of the ways in which government officials and corporate leaders across the globe are responding to the challenges of cybersecurity. Drawing perspectives from industry, government, and academia, the book incisively analyzes the actual issues, and provides a guide to the continually evolving cybersecurity ecosystem. It charts the role that corporations, policymakers, and technologists are playing in defining the contours of our digital world. Rewired: Cybersecurity Governance places great emphasis on the interconnection of law, policy, and technology in cyberspace. It examines some of the competing organizational efforts and institutions that are attempting to secure cyberspace and considers the broader implications of the in-place and unfolding efforts—tracing how different notions of cybersecurity are deployed and built into stable routines and practices. Ultimately, the book explores the core tensions that sit at the center of cybersecurity efforts, highlighting the ways in which debates about cybersecurity are often inevitably about much more. Introduces the legal and policy dimensions of cybersecurity Collects contributions from an international collection of scholars and practitioners Provides a detailed "map" of the emerging cybersecurity ecosystem, covering the role that corporations, policymakers, and technologists play Uses accessible case studies to provide a non-technical description of key terms and technologies Rewired: Cybersecurity Governance is an excellent guide for all policymakers, corporate leaders, academics, students, and IT professionals responding to and engaging with ongoing cybersecurity challenges.

The Internet is making our daily lives as digital as possible, and this new era is called the Internet of Everything (IoE). The key force behind the rapid growth of the Internet is the technological advancement of enterprises. The digital world we live in is facilitated by these enterprises’ advances and business intelligence. These enterprises need to deal with gazillions of bytes of data, and in today’s age of General Data Protection Regulation, enterprises are required to ensure privacy and security of large-scale data collections. However, the increased connectivity and devices used to facilitate IoE are continually creating more room for cybercriminals to find vulnerabilities in enterprise systems and flaws in their corporate governance. Ensuring cybersecurity and corporate governance for enterprises should not be an afterthought or present a huge challenge. In recent times, the complex diversity of cyber-attacks has been skyrocketing, and zero-day attacks, such as ransomware, botnet, and telecommunication attacks, are happening more frequently than before. New hacking strategies would easily bypass existing enterprise security and governance platforms using advanced, persistent threats. For example, in 2020, the Toll Group firm was exploited by a new crypto-attack family for violating its data privacy, where an advanced ransomware technique was launched to exploit the corporation and request a huge figure of monetary ransom. Even after applying rational governance hygiene, cybersecurity configuration and software updates are often overlooked when they are most needed to fight cyber-crime and ensure data privacy. Therefore, the threat landscape in the context of enterprises has become wider and far more challenging. There is a clear need for collaborative work throughout the entire value chain of this network. In this context, this book addresses the cybersecurity and cooperate governance challenges associated with enterprises, which will provide a bigger picture of the concepts, intelligent techniques, practices, and open research directions in this area. This book serves as a single source of reference for acquiring the knowledge on the technology, process, and people involved in next-generation privacy and security.