Access Denied: The Complete Guide to Protecting Your Business Online

Rating:
Summary: Excellent introduction to security, a must read
Review: This book won me over by making the complex simple and presenting security as it relates to the bottom line. As the authors point out, business people and IT professionals each speak a different language and waste a lot of time (and revenue) debating when they both really want the same thing. This is the best non-technical introduction to security I have read to date. It didn't waste my time comparing vendors and products and it made the complexities of security clear enough for me to grasp the threats facing our organization.
The section on risk assessment is as concise and on target as it gets. Why spend $[PRICE]on a box to "fix" all of your problems if the potential damage might be less than half of that? The best practices at the end of the chapters give a good start for you to develop a security plan and make it work. People have been talking about security as a process for years but unfortunately no one told the management.
Although this isn't a technical manual with step-by-step instructions for every firewall and operating system you can think of (hacking exposed) IT personnel will have their eyes opened and start thinking about a lot of things they may have never worried about. The book even touches on preparing for disasters...
including terrorism

Rating:
Summary: Great overview, a lot of food for thought
Review: This is a really good introduction to security for non-technical and IT personnel. It covers a lot of subject matter including disaster planning, and writing a security policy. This book is an excellent resource for managers who need a clue. It is written better, more organized and more helpful than "Secrets and Lies" and other similar books. I recommend this book for anyone that needs a good overview of security. You may not be a CISSP after you finish it but you will understand what a CISSP is saying.