ISM Security Handbook

A working reference for information security managers. 478 topics - governance, risk management, program development and management, security operations, AI security - cross-linked, searchable, and readable with the network off. Part 1 - Information Security Governance, 41 topics - is free and complete. Every other part is browsable in full structure and summary, and unlocks with a one-time purchase that never renews. It exists to answer what you should be considering, before a decision, a review, or a difficult meeting. The structure follows the CISM and AAISM domains, because that is a good map of the field. WHAT IS INSIDE - Five parts: Information Security Governance; Information Security Risk Management; Information Security Program Development and Management; Security Operations Management; AI Security Management. - 478 topics, each a structured card - summary, core concepts, key terms, frameworks and lifecycles, memory anchors, easily-confused pairs, practice notes. - Coverage is audited against the source outlines: all 218 numbered CISM nodes across Domains 1-4, and all 182 AAISM sections and subsections, have a topic of their own. Part 4 also carries security-operations material beyond the CISM domains. - A 1,324-term glossary derived from the topics themselves, with an A-Z rail and, for every term, the topics that define it. - 1,372 typed cross-links - related, prerequisite, framework-for, example-of, contrasts-with, easily-confused-with, see-also - shown grouped on each topic and as a connection map you can follow hop by hop. - Seven threads that cut across the parts, for when the question is thematic rather than structural. HOW IT WORKS - Browse - one expandable map: part, sub-part, section, subsection, with a one-line essence at every level, and a viewed count as you go. - Search - full text across titles, summaries, key terms, tags and section numbers. A Definitions block answers what a term means, drawn from the glossary, above the results, and your own notes are searched alongside. - Connect - start from the most connected topics, or from where you left off, then follow the links outward. - Saved - bookmarks, notes, and the topic you stopped on. - Glossary - A-Z, with a definition preview on every row. - Spotlight - every topic is indexed, so you can jump straight in from the home screen. - iPad - a split view throughout: the map or the list in the sidebar, the topic in the detail column. Command-1 to Command-5 switch tabs, Command-F searches, Command-B bookmarks. - Dynamic Type up to the largest accessibility sizes, in light and dark. OFFLINE, AND PRIVATE The knowledge base ships inside the app. Every topic, link and glossary entry is readable with no network at all. Bookmarks, notes and reading history sync through your own iCloud account, in Apple's private database - a topic you flag on iPad is there on iPhone, and nobody else can read it, the developer included. No account to create, no tracking, no data collected. Sign out of iCloud and the app keeps working with what is already on the device. ORGANISED AROUND CISM and AAISM (ISACA) for structure; NIST Cybersecurity Framework 2.0; ISO 27001; COBIT; NIST SP 800-series; MITRE Adversarial Tactics, Techniques and Common Knowledge; Lockheed Martin Cyber Kill Chain; CVSS and EPSS; STIX and TAXII; SOC-CMM. These frameworks shape how the material is organised and what it covers; none of them is reproduced here. All content is original, written for information security professionals. An independent, unofficial professional reference. Not affiliated with, authorized, sponsored, or otherwise endorsed by ISACA, NIST, ISO, or any other standards body.