Information Security Governance Simplified

Foreword

For nearly 35 years I have been closely involved in information security and the development and implementation of supporting policies, standards, and procedures. This has often been an overlooked and undersupported portion of implementing an effective information security program. What was missing in the early years was an authoritative examination of the processes needed to manage the implementation of such a program from executive row to entry-level personnel.

Todd Fitzgerald’s new book, Information Security Governance Simplified: From the Boardroom to the Keyboard, presents 15 chapters of advice and real-world experience on how to handle the roll out of an effective program.

Corporate governance addresses the foundation upon which ...