Re: Books on Information Security

[Bob Radvanovsky <rsradvan () infracritical com>]

I would check out books on the following topics:

- forensics management and IT forensics investigation
- intrusion detection/prevention management
- some practical coding (shell scripting and basic language coding)
- risk management (includes conducting assessments with analysis)
- project management
- critical infrastructure protection
- homeland security (not necessarily CIP, but ties into it)
- emergency management and preparedness
- bioterrorism and biosecurity (general)
- network security (routers, switches, et. al)
- information security and policy management
- disaster recovery planning (DRP, general)
- business continuity planning (BCP, now called "COOP", also general)
- antivirus protection
- ID theft and protection
- spam protection and email security
- policy documentation
- IT governance (ISO 17799, COBIT, FIPS, FISMA, HSPD-12, et. al)

There are TONS of good books out there, even as aged as they are, are timeless as they offer a good *base* and 
fundamental understanding on "what is 'security'".  The list is too large to mention here.

-rad

At Fri, 6 Jan 2006 12:09:30 -0500, you wrote:
> A client of mine asked me for recommendations on books or literature
> that provide a solid foundation to information security, from a
> (non-technical) management point of view.
>
> I'm mostly used to material that approaches it from a computer
> security point of view, and so I'd like to get opinions from people
> who are more familiar with the non-technical literature than I am.
>
> Suggestions? Recommendations?
>
> Jairus
>
> ---------------------------------------------------------------------------
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The Norwich University program offers unparalleled Infosec management 
> education and the case study affords you unmatched consulting experience. 
> Tailor your education to your own professional goals with degree 
> customizations including Emergency Management, Business Continuity Planning, 
> Computer Emergency Response Teams, and Digital Investigations. 
>
> http://www.msia.norwich.edu/secfocus
> ----------------------------------------------------------------------------


Bob Radvanovsky, CISM, CIFI
Infracritical, Inc.
rsradvan () infracritical com
(630) 673-7740 | (412) 774-0373 (fax)










---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------