Stepping Through the InfoSec Program is a textbook
meant to provide
Information Security Managers and other IT Professionals
an introduction to the profession and how
Information Security is accomplished within organizations.
The book is out of print but may be available on Amazon.
book review was published in
The Information System Control Journal (pdf version).
Book reviews were also posted on Amazon