This resource is for IT managers and all types of security managers, as well as students in business, computing, IT, or telecommunications programs. After an introduction on information security and management concepts, material is organized according to six security life cycle phases, from security planning and analysis though design, implementation, review, and continual security. The book explains the ISO 17799 and 27001 standards and walks through steps of conducting a nominal security audit that conforms to the standards. Learning features include review questions, real-world examples, and hypothetical case activities. For students who have taken previous courses in information security concepts, security risk assessment, and information security standards, the book can be used as a text for a capstone course. Raggad teaches IT security at Pace University. Annotation ©2010 Book News, Inc., Portland, OR (booknews.com)