Security Policies and Procedures: Principles and Practices

This book was not only required for a class where we had to write a security policy for the term paper, I am using it for my Senior Capstone project security policy. I do not find the book wordy, as another reviewer has said. Security Policy is not that thrilling a topic, but it is necessary if you are going to be in Security Management. I do hope, however, that this book will be updated soon. Some of the info, such as all the references to ISO 17799 need to be updated to the newer ISO 27001. Much has changed in the security field since this book came out in 2006. But overall, a very helpful book if you have to actually write policies.