A practical guide to managing information security This groundbreaking book helps you master the management of information security concentrating on the proactive recognition and resolution of the practical issues of developing and implementing IT security for the enterprise. Drawing upon the authors wealth of valuable experience in high risk commercial environments the work focuses on the need to align the information security process as a whole with the requirements of the modern enterprise which involves empowering business managers to manage information security related risk. Throughout the book places emphasis on the use of simple p