A Practical Guide to Security Assessments

Rating:
Summary: Excellent Resource
Review: Excellent. This book is a practical approach to security assessment from planning to the final report. Being in this field for over ten years, this is the first book that truly provides the appropriate level of guidance from not just the security assessment but also from the business standpoint where it looks at involved risks. The appendix is excellent and extremely useful, particularly the questionnaires, which can be modified, based on the type of assessment/client. The book is well structured and very clear, and provides a logical approach to addressing and assessing information security issues. Highly recommended reading.