This book covers the theoretical foundations of ensuring organizational information security, including assessing risks, managing information policies and standards, and developing legal, organizational, and technical measures