Commercial, personal and sensitive information is very hard to keep secure, and technological solutions are not the only answer.In todays technology-driven environment, there is an ever-increasing demand for information delivery on various devices in the office, at home and in public places. A compromise has to be struck between security of information and its availability.This book is a pragmatic guide to information assurance for both business professionals and technical experts. It provides significant first steps along the path of dealing with information assurance in a realistic and comprehensive manner, from the underlying principles of information security and risk, to security lifecycles and both technical and non-technical controls.The third edition has been updated to reflect changes in the IT security landscape and updates to the BCS Certification in Information Security Management Principles (CISMP), which the book supports