Information Security Policies and Procedures: A Practitioner's Reference, Second Edition [Hardcover]

Thomas R. Peltier (Author)

Book Description

ISBN-10: 0849319587 | ISBN-13: 978-0849319587 | Publication Date: May 20, 2004 | Edition: 2

Information Security Policies and Procedures: A Practitioner’s Reference, Second Edition illustrates how policies and procedures support the efficient running of an organization. This book is divided into two parts, an overview of security policies and procedures, and an information security reference guide. This volume points out how security documents and standards are key elements in the business process that should never be undertaken to satisfy a perceived audit or security requirement. Instead, policies, standards, and procedures should exist only to support business objectives or mission requirements; they are elements that aid in the execution of management policies.

The book emphasizes how information security must be integrated into all aspects of the business process. It examines the 12 enterprise-wide (Tier 1) policies, and maps information security requirements to each. The text also discusses the need for top-specific (Tier 2) policies and application-specific (Tier 3) policies and details how they map with standards and procedures.

It may be tempting to download some organization’s policies from the Internet, but Peltier cautions against that approach. Instead, he investigates how best to use examples of policies, standards, and procedures toward the achievement of goals. He analyzes the influx of national and international standards, and outlines how to effectively use them to meet the needs of your business.

Editorial Reviews

Review

The path to information security is a long one, but in this book author Thomas Peltier makes the scenery attractive along the way. Peltier walks the reader through [the text] with clarity, completeness, and humor.
- Security Management, June 2005

Product Details

• Hardcover: 448 pages
• Publisher: Auerbach Publications; 2 edition (May 20, 2004)
• Language: English
• ISBN-10: 0849319587
• ISBN-13: 978-0849319587
• Product Dimensions: 9.2 x 6.4 x 1.1 inches
• Shipping Weight: 1.5 pounds (View shipping rates and policies)
• Average Customer Review: 3.7 out of 5 stars  See all reviews (7 customer reviews)
• Amazon Best Sellers Rank: #203,512 in Books (See Top 100 in Books)

More About the Author

Discover books, learn about writers, read author blogs, and more.

Customer Reviews

Most Helpful Customer Reviews

6 of 6 people found the following review helpful:

5.0 out of 5 stars Practical Policy Reference, May 19, 2005

By 

Anthony Lai Cheuk Tung "Anthony LAI, CISSP, C... (Hong Kong SAR) - See all my reviews

This review is from: Information Security Policies and Procedures: A Practitioner's Reference, Second Edition (Hardcover)

This is a useful book for me to reference, especially when I deal with challenges in security policy framework review. The most impressive pages include the tier 1-2-3 framework, proper wordings in policy, policy sample studies and analysis, complete checklist and questionnaire.

After reading this book or on-and-off reference, I always remember four major elements in a policy:
1. Topic
2. Scope
3. Responsibility
4. Compliance

In addition, I have shared this book with an IT supervisor, he always go for this book for the team reference. I do feel happy to recommend it. Moreover, it readily happens to me I could apply the hints and tips from this book to the revised policy. Meanwhile, compared with the company's policy, it is undoubted organized and logical.

Be honest, in reality, many people still always mix up policy, standard and procedures as well as guidelines and produce a "Spaghetti-like" document to deal with auditor and compliance once a year only, you could say, many companies treat it as a last-minute homework.

10 of 12 people found the following review helpful:

3.0 out of 5 stars Spend Your Money Elsewhere, April 12, 2002

By A Customer

Amazon Verified Purchase

This review is from: Information Security Policies and Procedures: A Practitioner's Reference (Paperback)

While this is a good reference, it's value does not match its price. The entire book in not included on the CD and the book does not include a "complete" set of policies. It is certainly enough to get you started, but not enough to complete the task.

If you are considering buying a used copy from an amazon marketplace seller as I did, be careful. The pages did not fit the binder and the CD was missing its setup file. I had to return it.

If you need assistance with security policies and procedures, take a look at Thomas Peltier's other book, Information Security Policies, Procedures and Standards: Guidelines for Effective Information Security Management. It contains almost all of the same material, at a much more reasonable price.

6 of 8 people found the following review helpful:

5.0 out of 5 stars A true practitioner's reference, August 5, 2004

By 

Donald E. Hester "Cyber Security Guru" (SF Bay Area, CA United States) - See all my reviews
(REAL NAME)   

This review is from: Information Security Policies and Procedures: A Practitioner's Reference, Second Edition (Hardcover)

This is one of the best books available for information systems security polices. The book covers tier 1 and tier 2 policies. This book looks at policies as a business enabler where policies support management's organizational goals. Great samples!