The Virtual Bookcase Reviews of 'Network Security: How to Plan for It and Achieve It':
Reviewer Rob Slade wrote:
Despite the title, this is a general data security guide, with material for the
distributed environment included. It provides a fairly thorough framework for
policy work, and is particularly strong when discussing the social and
"political" aspects of security. It is quite practical in the areas of staff
involvement, and the need for education and participation.
The lack of any theoretical discussion will be considered a small loss by
managers, but the technical material is quite weak. The chapter on computer
viral programs shows that the author has no familiarity with that field.
Possible future developments are presented as established fact, and the "facts"
listed throughout are conjectural.
The very extensive bibliography turns out to be a list of clippings from the
trade press. This might, perhaps, be useful for fleshing out some backgrounds,
but the lack of any substantive works makes the overall information in the book
highly suspect.
(Can *anyone* give me a confirmed example of a "salami scam" attack? Anyone?)
For those who have the time and the technical resources to do a thorough
security policy review, this could help to direct the project and keep it on
track. Others may wish to look at "Information Security Policies Made Easy"
(
see reviews).
copyright Robert M. Slade, 1995
Add my review for Network Security: How to Plan for It and Achieve It