This interesting work on the state of modern IT security examines the de-professionalization of the of the industry in the past decade, and explores the reasons why conventional security processes, based largely on standards and policies rather than skilled analysis, fail to stop current large scale malicious security threats. The work covers security personnel issues including the roles of executives, hackers, and standards evangelists, automated security processes and the problems of the IT profession, and security products. The final portion of the volume explores a holistic approach to re-engineering professional security practices. Tibble is an experienced IT security consultant. Annotation ©2012 Book News, Inc., Portland, OR (booknews.com)