A veteran of information technology security, Peltier highly recommends that companies establish policies, standards, and procedures not just to satisfy perceived audit or security requirements, but as an integral part of the organization's operation and a tool of management goals. Every organization needs to address at least 12 enterprise-wide policies, he says, and examines each one and maps information security requirements into each. He also discusses topic-specific and application-specific policies and how they map with standards and procedures. Distributed by CRC. Annotation ©2004 Book News, Inc., Portland, OR (booknews.com)