At http://www.apress.com/9781430251132, APress Open have made a free e-Book available on Managing Risk and Information Security
"This ApressOpen book describes the changing risk environment and why a fresh approach to information security is needed.The book discusses business risk from a broad perspective, including privacy and regulatory considerations. It describes the increasing number of threats and vulnerabilities, but also offers strategies for developing solutions."
