Management of Information Security primarily focuses on the managerial aspects of information security, such as access control models, information security governance, and information security program assessment and metrics. Coverage on the foundation and technical components of information security is included to reinforce key concepts. The third edition includes up-to-date information on changes in the field such as revised sections on national and international laws and international standards like the ISO 27000 series. With these updates, Management of Information Security continues to offer a unique overview of information security from a management perspective while maintaining a finger on the pulse of industry changes and academic relevance.

Features and Benefits

• Reflects changes in the field, including revised sections on national and international laws and international standards such as the ISO 27000 series.
• Expanded coverage in key managerial areas of Information Security Governance, Access Control Models, and Information Security Program Assessment and Metrics.
• Applies a running case study which follows a fictional company as it encounters various information security issues, rounded out by discussion questions that encourage class participation.
• Offers "Viewpoint" essays to provide a range of commentary that illustrate interesting topics or share personal experiences--providing students with real-world examples.
• Reinforces skills as they are learned with extensively revised review questions, hands-on activities, and case projects in each chapter.

 Six-figure salaries are the norm for Information Security Managers in the United States, with median pay hovering around $108K per year.  Cash earnings of Information Security Managers can occasionally include $20K each in bonuses and profit sharing proceeds; this strong performance component causes pay grades to stretch from approximately $73K to almost $153K.  Geography is the biggest factor affecting pay for this group, followed by the company and years of experience.  Job satisfaction is reported as high by the vast majority of workers.  Medical and dental benefits are awarded to a large number, and most earn vision coverage.  Men account for the majority of Information Security Managers who responded to the questionnaire — 88 percent to be exact.  Participants in PayScale's salary questionnaire provided the particulars of this report.

While not commonly seen, Information Security Managers who transition into a Chief Information Security Officer position may see a rise in pay. The median salary for Chief Information Security Officers is $157K per year.  The most common promotion for Information Security Managers is an Information Security Officer position, which usually brings in $87K a year. Another standard transition for Information Security Managers seeking advancement is to assume a Director of Computing & Information Technology Security role, where pay is often $116K.