It is important for a company to have well-defined policies and procedures to guide their security decisions. It is equally important that a functional business continuity and / or disaster recovery plan be in place in the event of a catastrophe. These are my top picks for books to help you understand these tools and create your own.

1. Writing Information Security Policies

Information security is not a product or something you can install and forget. Having a well-defined information security policy is the keystone of good security for any company. This book illustrates the importance of infosec policies and helps highlight the areas you should focus on and the questions you should ask in order to create an effective policy for your company.More »

2. Security Planning and Disaster Recovery

This book focuses not only on technology, but also discusses the laws and regulations that are part of security planning, It helps you create systematic plans for recovering from information security incidents and how to effectively use auditing and proactive testing to periodically assess the security of your network and identify areas for improvement.More »

3. Internet Security

This book is an execellent resource for an IT Manager or Security Administrator trying to establish security policy and procedure. The subtitle- A Jumpstart for Systems Administrators and IT Managers- says it all. Internet Security contains a lot of information on networking technology and concepts and various security technologies such as cryptography and firewalls.More »