Review
"Complete kit of proven best practices that any organization can use and customize to make policies meeting their exact needs." --
Jay Heiser, Columnist, "Information Security" magazine , September 2002"The gold standard Policy reference for any serious security practitioner to have in their arsenal of tools, a must have!" --
John B. Kramer, CISSP, CISA, Information Security Manager UPMCHS, September, 2002"Version 9 is a significant advance from previous versions making it a necessary part of every information security practitioners library" --
Donn B. Parker, CISSP, September, 2002
About the Author
Charles Cresson Wood is an author and independent information security consultant based in Sausalito, California. In the information security field on a full-time basis since 1979, he has worked as an information security management consultant at SRI International (formerly Stanford Research Institute) as well as lead network security consultant at the Bank of America. He has done information security work with over 120 organizations -- many of them Fortune 500 companies -- including a large number of financial institutions and high-tech companies.
He is noted for his ability to integrate competing objectives (like ease-of-use, speed, flexibility and security) in customized and practical compromises that are acceptable to all parties involved. Acknowledging that information security is multi-disciplinary, multi-departmental, and often multi-organizational, he is additionally noted for his ability to synthesize a large number of complex considerations and then to document these in security architectures, system security requirements, risk assessments, project plans, policy statements, and other clear and action-oriented documents.