Structured along the same lines as the certification class, this volume describes the tasks performed by information security managers and offers the necessary knowledge to manage, design, and oversee an information security program. It examines five functional areas: security governance, risk management, information security program management, information security management, and response management. Presenting definitions of roles and responsibilities throughout the organization, this practical guide deals with processes and technical solutions that implement the information security governance framework, focuses on the tasks necessary to effectively manage information security, and provides a description of various techniques the information security manager can use.