The Information Systems Security Officer's Guide: Establishing and Managing an Information Protection Program, Second Edition

Rating:
Summary: Dissapointing
Review: ...I expected more for my $.
While some of the material was good, there is just not enough substance to justify the cost.

Rating:
Summary: A great guidebook for Information Security Professionals
Review: Another excellent book from a knowledgeable authority. Insightful and well written, Dr. Kovacich provides some excellent advice for the ISSO and anyone involved in Information Security. The practical approach to implementing and managing an effective Information Security (INFOSEC) program is applicable to both US private sector and governmental organizations. This book is a must read for both the novice and seasoned professional and anyone interested in Information Security.

Rating:
Summary: A great guidebook for Information Security Professionals
Review: Another excellent book from a knowledgeable authority. Insightful and well written, Dr. Kovacich provides some excellent advice for the ISSO and anyone involved in Information Security. The practical approach to implementing and managing an effective Information Security (INFOSEC) program is applicable to both US private sector and governmental organizations. This book is a must read for both the novice and seasoned professional and anyone interested in Information Security.

Rating:
Summary: Practitioner's perspective
Review: Dr. Kovacich has updated one of the classic management works for the people who are responsible for the overal design, development and delivery of a comprehensive, enterprise-wide protection program. There are lots of books out there that will assist those who have technical responsibilities for security in doing a better job. There are very few that help develop the manager's who must harmonize people, processes and technology to address the rapidly increasing range of risks that can impact organizations that are all becoming ever more dependent on information technology to accomplish their objectives. If you are now or aspire to be a manager or director of information security for an organization this is an essential guidebook that will advise and assist you in meeting the challenges inherent in that role.

Rating:
Summary: A must read one-of-a-kind guide book for the ISSO
Review: Greater than I expected. Well thoughtout and organized; written in simple, clear language; good advice and guidelines for the new ISSO; excellent examples of using management techniques and tools for establishing an effective InfoSec program; forward looking, expecially the chapter on 21st Century Challenges for the ISSO. This is a one-of-a-kind book for the InfoSec professional and a must reading by all people interested in an InfoSec career. Even the experienced ISSO can find great value in this book. If an ISSO followed the guidance offered, success is almost a certainty. A book that should be adopted for required study in business management, computer science, and information security courses.

Rating:
Summary: At last - practical guidelines about a InfoSec program!
Review: Having both a law enforcement and private sector background, I appreciated the premise of Dr. Kovacich's book as it related to the Information Security Officer's duties and challenges. His approach will enable the reader to better understand the corporate environment concerning, not only the management process involved in protecting information, but also the importance of communicating and interacting with the organization in a way that people feel motivated to develop and maintain a successful and effective InfoSec program. The book discusses important management tenets and procedures which demonstrates the authors insight and experience in dealing with "real world " InfoSec issues. This book is easy reading and provides a clear understanding of the information security functions by taking the reader through the business and management environment and at the same time stressing a very important point that is often overlooked, i.e., an awareness and expectation that change is constant. I've recommended this book to those who are currently in the information security business and anyone who is attempting to pursue a career in this field. This book would be an ideal supplement to a variety of college courses and/or seminars pertaining to business and information technology.

Rating:
Summary: Made me think about the profession
Review: I read this book for a Internet Security course and I was very intrigued with it's handling of the subject matter. As the title suggests, it is a guide for an ISSO's job. It give clear insight as to what you should be focusing on and how you should expect to handle your day to day job and also how important it is to get the entire company involved in your efforts.
I enjoyed this book very much.

Rating:
Summary: Made me think about the profession
Review: I read this book for a Internet Security course and I was very intrigued with it's handling of the subject matter. As the title suggests, it is a guide for an ISSO's job. It give clear insight as to what you should be focusing on and how you should expect to handle your day to day job and also how important it is to get the entire company involved in your efforts.
I enjoyed this book very much.

Rating:
Summary: Dissapointing
Review: If you are looking to grow as a security professional, this book can definately help you. Regardless of if your just getting started in the industry or if you have 20 years under your belt, you will learn something from this author. It discusses everything from marketing yourself, getting hired, planning, hiring staff, performing risk management, classifying your information, doing metrics analysis and of course how to deal with people and politics in your "ISSO" position. A definate must have for anyone looking to manage an Information Security program for an organization.

Rating:
Summary: The Security Officers must have book
Review: Once again Dr. Kovacich has excelled. He has produced an updated version of already 'must have' book for any information security officer. It is the sort of book that is useful to both the experienced information security officer and to the person who is new to the area. The book is written in a format that makes it very readable and also that you can easily find that piece of information that you can remember seeing but can't exactly recall where..

I wish that he had been writing this type of book when I first started out in the Infosec field. If you only buy one information security book - make sure it is this one.