Emphasizes the business approach and shows how security is important to be left in the hands of just one department or employee. This book shows that having a comprehensive plan requires more than the purchase of security software - it requires a framework for developing and maintaining a system that is proactive.