Stepping Through the InfoSec Program is a textbook meant to provide Information Security Managers and other IT Professionals an introduction to the profession and how Information Security is accomplished within organizations.

The book is available at the Information Systems Audit and Control Association bookstore (also on Amazon, but ISACA members get discounts at the bookstore).

A book review was published in The Information System Control Journal (pdf version).

Book reviews were also posted on Amazon and Slashdot.