Information Security Policies and Procedures: A Practitioner's Reference, Second Edition

Rating:
Summary: look elsewhere
Review: I must agree with the previous reviewer, this book is lacking.
I bought a copy new and had the same problem where the
holes punched in the paper does not match the binder spacing.
What terrible quality. I had to force myself to even read
through the book after that.

And I found it lacking. The first part has some good info
about how to write a policy. Good but not great.

The second part was a sample policy/standard/procedure rolled
into one. I found it too thin and missing too much to be
really useful.

I haven't looked at the text the previous reviewer recommends,
but I have to say, given another book with similar content,
definitely stay away from this one.

My personal recommendation is Information Security Policies
Made Easy, by Charles Cresson Wood. It's pricey but oh so
worth it.

Rating:
Summary: Spend Your Money Elsewhere
Review: While this is a good reference, it's value does not match its price. The entire book in not included on the CD and the book does not include a "complete" set of policies. It is certainly enough to get you started, but not enough to complete the task.

If you are considering buying a used copy from an amazon marketplace seller as I did, be careful. The pages did not fit the binder and the CD was missing its setup file. I had to return it.

If you need assistance with security policies and procedures, take a look at Thomas Peltier's other book, Information Security Policies, Procedures and Standards: Guidelines for Effective Information Security Management. It contains almost all of the same material, at a much more reasonable price.