Read more
Zusatztext 'McIlwraith's message is important. His writing is interesting and clear. His suggestions are useful. His book is recommended for anyone with either a specific obligation for awareness training! or overall responsibility for security management.' Robert M. Slade! Victoria Tele-community Network! Canada 'Information is every organisation's most prized asset. This book will be essential reading for organisations which! although content with the technical security measures in place! nonetheless have concerns over whether their staff have sufficient understanding of this area.' Information Security Specialist Group Magazine '...provides a very pragmatic solution! improving strategies and techniques for educating and training employees in information security! and explains how different metrics can be used to assess awareness and behavior. It is a worthwhile reading book and a must for every business library.' Educational Book Review! India Informationen zum Autor Angus McIlwraith has worked in the field of Information Security and Business Control for 20 years. He has for many years held (and broadcast) the view that Information Security is not making best use of time and resources by failing to address some fundamental issues. By not doing so! time and money is wasted; in some extreme circumstances! lives are being put at risk unnecessarily. Angus' professional experience was gained mainly in Financial Services. He has worked for Lloyds Bank! American Express! NatWest Bank and Standard Life! as well as working as a consultant to a wide range of international organizations. He has spoken at many conferences! including numerous Information Security Forum (ISF) Congresses! the London based COMPSEC conference! the Institute of Internal Auditors annual conference and the British Computer Society Information Security Specialist Group (BCS ISSG). Angus was an elected Member of the ruling Council of the ISF for eight years and was a member of the UK based Banking Information Security Expert Panel (BISEP). He writes regularly for many publications. He held a monthly column in Information Security Management magazine! and provided a monthly piece in Secure Computing magazine for many years. Zusammenfassung Explains how corporate culture affects perceptions of risk and information security, and how this in turn affects employee behaviour. The author provides a pragmatic approach for educating and training employees in information security and explains how different metrics can be used to assess awareness and behaviour....
