Managing an Information Security and Privacy Awareness and Training Program [Hardcover]

Rebecca Herold (Author)

Book Description

Publication Date: April 26, 2005 | ISBN-10: 0849329639 | ISBN-13: 978-0849329630 | Edition: 1

Managing an Information Security and Privacy Awareness and Training Program provides a starting point and an all-in-one resource for infosec and privacy education practitioners who are building programs for their organizations. The author applies knowledge obtained through her work in education, creating a comprehensive resource of nearly everything involved with managing an infosec and privacy training course. This book includes examples and tools from a wide range of businesses, enabling readers to select effective components that will be beneficial to their enterprises. The text progresses from the inception of an education program through development, implementation, delivery, and evaluation.

Editorial Reviews

About the Author

Rebecca Herold, LLC, Van Meter, Iowa, USA --This text refers to an alternate Hardcover edition.

Product Details

• Hardcover: 552 pages
• Publisher: Auerbach Publications; 1 edition (April 26, 2005)
• Language: English
• ISBN-10: 0849329639
• ISBN-13: 978-0849329630
• Product Dimensions: 9.1 x 6.4 x 1.4 inches
• Shipping Weight: 2 pounds
• Average Customer Review: 4.8 out of 5 stars  See all reviews (9 customer reviews)
• Amazon Best Sellers Rank: #1,834,508 in Books (See Top 100 in Books)

More About the Author

See my business website at: http://www.privacyprofessor.com
Follow me on Twitter at: http://twitter.com/privacyprof
Find me on LinkedIn at: http://www.linkedin.com/in/rebeccaherold
Follow my blog at: http://www.realtime-itcompliance.com

Customer Reviews

Most Helpful Customer Reviews

20 of 20 people found the following review helpful:

5.0 out of 5 stars THE Definitive Book on Information Security Practice, July 24, 2005

By 

Dr. Stephenson - See all my reviews

This review is from: Managing an Information Security and Privacy Awareness and Training Program (Hardcover)

I'll begin by saying that I have two broad comments about Ms. Herold's new book, Managing an Information Security and Privacy Awareness and Training Program. First, it may be the definitive book on the topic and seems to have enough meat to be the definitive book on the practice of information security in general. It approaches the profession in the right way: people-oriented. That is rare and important. Second, I actually read it from cover to cover - a rare thing for me. Professional books usually find their ways to my reference library and are used mostly for that purpose, not for general reading.

In the over twenty years I have been in the information security profession I have seen a lot of approaches to managing the security of organizational information. There is one common thread that ties all of those approaches together. The successful ones address the people who use and manage that information. Technology simply is a collection of tools to assist the information assurance manager with the task. It has been said that there are management solutions to technical problems but no technical issues to management problems. Ms. Herold addresses this homily head-on and does it with style, personality and skill.

Her experience shows as does the commentary from two icons in our profession, Donn Parker and Hal Tipton. If you have any questions about whether you should buy this book, read their comments in the Preface and Forward.

I have known Becky for many years and I respect her skill, experience and ability to present important issues clearly, concisely and understandably. Her latest book does all that and more.

If I was told that I was moving to a new office and could take only two boxes of books with me from my library, I would fill both with technical books but I would leave space for the only two general books on information assurance I will ever need. One is "The Computer Security Handbook" edited by my good friend and long-time colleague Dr. Mich Kabay. The other would have to be "Managing an Information Security and Privacy Awareness and Training Program". It would take more than the two boxes to cover technical issues in security, but I could put Mich's and Becky's books in my brief case. Then I would have the perfect security library.

This book is highly recommended for any information assurance professional (or aspiring professional), manager with information assurance responsibilities, or training coordinator. I'm sure there are others who need this new offering as well, but Amazon only allows so much space for these reviews. I also will be highly recommend this book to our students in the MSIA program at Norwich.

Peter R. Stephenson, PhD, CISSP, CISM, FICAF
Associate Program Director, MSIA
Norwich University

8 of 8 people found the following review helpful:

5.0 out of 5 stars The definitive reference on creating an information security, May 16, 2005

By 

Ben Rothke "Author of 'Computer Security: 20 ... (USA) - See all my reviews
(REAL NAME)   

This review is from: Managing an Information Security and Privacy Awareness and Training Program (Hardcover)

Managing an Information Security and Privacy Awareness and Training Program is without a doubt the definitive reference on creating an information security awareness program

Behind most information security problems are users who are untrained in security or unaware of the security risks. Millions of dollars of firewalls and cryptography can be bypassed by an unaware end-user.

Managing an Information Security and Privacy Awareness and Training Program is a tremendous book that can be used as a foundation for an effective and comprehensive information security awareness program.

The book contains the fundamental and metrics of why you need an awareness program, and everything you need to set up such a program.

The book is filled with good and advice and direction. Chapter 14 contains 143 methods for effective awareness. The other chapters provide equally effective information and advice.

At 500 pages, this book contains everything you need to know about creating and setting up an effective awareness program and is highly recommended.

7 of 7 people found the following review helpful:

5.0 out of 5 stars A great investment in your awareness program, August 28, 2007

By 

D. J. Lineman "Information Shield" (Houston, TX USA) - See all my reviews
(REAL NAME)   

Amazon Verified Purchase

This review is from: Managing an Information Security and Privacy Awareness and Training Program (Hardcover)

If your organization is considering a security or privacy awareness program, this book will pay for itself many times over. I am not aware of any other resource that includes this much material about the art and science of awareness and training. Although this book is over 500 pages long, I found it easy to jump to specific chapters to get just the information I needed. The main chapters cover every aspect of program development including: planning, establishing a business case, budgeting, selling management, audience selection, material design and development, implementation, and measurement. Chapter 10 alone - which maps over 50 different awareness topics to various job roles - should save an organization thousands of dollars in program planning. And don't overlook the Appendices. Almost every sample form and worksheet you would need is available as an appendix. The assessment questionnaires alone should save dozens of hours of development. Definitely one of best security awareness investments your organization will ever make.