Going beyond the technical coverage of computer and systems security measures, this book provides readers a model for information assurance for businesses, government agencies, and other enterprises needing to establish a comprehensive plan. The components of security and how they relate are also featured. Content: Ch.1 Knowing what to secure, Ch. 2. Assessing risks, Ch. 3. Security policy, Ch. 4. Building and documenting an information assurance framework, Ch. 5. Maintaining security of operations, Ch. 6. Ensuring controlled access, Ch. 7. Personnel security