Assessing Information Security: Strategies, tactics, logic and framework

Chapter . Introduction

	‘We can’t just look at our own personal experiences or use the same mental recipes over and over again; we’ve got to look at other disciplines and activities and relate or connect them to what we know from our experiences and the strategic world we live in. If we can do this we will be able to surface new repertoires and (hopefully) develop a Fingerspitzengefühl[1] for folding our adversaries back inside themselves, morally-mentally-physically – so that they can neither appreciate nor cope with what’s happening – without suffering the same fate ourselves.’
	--Colonel John Boyd

A thorough treatise dedicated to various aspects of information security auditing must cover why and what kind of assessments have to be performed, ...