This practical title clearly explains the approaches that most organizations can consider and implement, which helps turn Information Security management into an approachable, effective and well-understood tool.