For an introductory course in information security covering principles and practices. This text covers the ten domains in the Information Security Common Body of Knowledge, which are Security Management Practices, Security Architecture and Models, Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP), Law, Investigations, and Ethics, Physical Security, Operations Security, Access Control Systems and Methodology, Cryptography, Telecommunications, Network, and Internet Security.
As I'm reading this for class, I'm obviously not finished with the entire text yet. However, from the few chapters we've covered, I feel like this book is entirely too employment-focused. It doesn't help that some of my assignments have asked us to find IS jobs and their salaries and requirements. I also understand that IS is a HUGE field and can't be covered entirely, even in its most basic form, by a single text. However, I feel like there should be less focus on WHY one should work in IS and more on the content of the field.
Had to read it for school. It was not the best on IT Security but it is ok for someone who is wanting to learn about the field. Most of the material is common sense stuff.