Metrics and Methods for Security Risk Management

Simply, the very best, most informative and educational reference for today's Security Professional. If you are responsible for developing a strategic security vision for your enterprise, this is a must read.

Being a Security Professional with a few years of experience, the title of the book appealed immediately as something different from what I'm used to reading. This book is not a typical Information Technology (IT) Security read, but, one that spans all forms of risk assessment, IT being one piece of it.

This is a complete and informative book for a wide range of risk management topics. Most technical books contain at least a bit of useless filler and I didn't find that to be the case here at all -- it is expert, informative, and well written.