Thomas R. Peltier 
Information Security Policies, Procedures, and Standards [PDF ebook] 
Guidelines for Effective Information Security Management

By definition, information security exists to protect your organization”s valuable information resources. But too often information security efforts are viewed as thwarting business objectives. An effective information security program preserves your information assets and helps you meet business objectives. Information Security Policies, Procedure