Kerry P, Reviewer
I work in IT security so I found this book to be very interesting. It is a well written book about how to implement effective management practices in an IT environment. It is a British book, so expect there to be some cultural differences. The main issue with implementing any compliance program is that it has to be part of the mission and goals of the organization, and documented in the job descriptions and performance goals. Without those key steps, you will just be spinning your wheels try to make changes to the organization.