Offers a comprehensive roadmap for designing and implementing an effective information security program. This title builds a bridge between high-level theory and practical execution by illustrating solutions to practical issues often overlooked by theoretical texts. It presents a set of practices that security professionals can use.