Information Risk Management: A practitioner’s guide

PREFACE

When it has become known that I have been writing this book, people say, ‘Oh, I see. It’s all about computer security then.’ Actually, no, it isn’t. Certainly computer security appears very frequently in many sections of the book – this is quite natural, since much of the information on which we rely today is either generated by, accessed through or stored on a computer system of some description.

In fact, most of the underlying issues are caused by people who have not been properly trained to do their job, who have not done it correctly or who are simply unaware that there was anything for them to do in the first place.

Technology is frequently the tool we use to secure information as well as to generate and store it and these activities ...