Based on a model that covers technological, organizational and legal views, this book deals with the management of information systems security and privacy. It also addresses principles in the background, enabling a reader to suit these principles to an organization's needs and to implement them accordingly by using explicit procedures.