Information Security and Auditing in the Digital Age: A Practical and Managerial Perspecive

Rating:
Summary: Really good book for practitioners and IS/IT students
Review: I am a practitioner who also teaches as an adjunct. I have looked at several security books in the past (Andress, Tipton and Kraus, Peltier, Pipkin, Anderson, etc) but this book is turning out to be my favourite. As claimed by the author, the book indeed does cover recent and relevant information in a systematic manner. The book is well designed -- first 3 chapters give an excellent overview,a discussion of management issues, and a methodology that includes attack trees. The 3 chapters of second part give a really good coverage of core security technologies and commonly used security packages. The strength of the book and the knowledge of the author really shows in part 3 and 4 of the book where the security technologies are applied to networks, wireless systems, web, XML, middleware, ecommerce, and modern distributed applications. The book concludes with discussion of auditing and very nice wrapup where a complete case is worked out. Every chapter has several short illustrative examples and a single case study of NRW (Nervous Wreck Inc.) is carried throughoughout. There are plenty of web links and pointers to other sources of information. Highly recommended for managers, practitioners, and IS/IT courses.