Information Security

A Practioner's Reference.

• Part 1: Information Security Policies and Procedures
1. Why Policies, Standards, and Procedures Are Needed
2. Why Manage This Process as a Project?
3. Planning and Preparation
4. Developing Policies
5. Information Classification
6. Developing an Electronic Communications Policy
7. Typical Organization Policies
8. Writing Procedures
9. Creating a Table of Contents
10. Establishing a Critique Process
11. Selling the Policies and Procedures
12. References
• Part 2: Information Security Reference Guide
13. Introduction to Information Security
14. Fundamentals of Information Security
15. Employee Responsibilities
16. Information Classification
17. Information Handling
18. Tools of Information Security
19. Information Processing
20. Information Security Program Administration
21. Baseline Organization Information Security Program
22. Appendix
• Part 3: Index

Not a bad book, but leaves a lot to desire. There are some examples in the end of the book that justifies the title, nothing more.