"… a practical, application-oriented introduction to security education and literacy. While the information is technical enough to provide value to information systems professionals, the organization around specific topics makes it accessible to non-technical users looking for information on specific issues. … the book would be appropriate for an upper-division introductory course on information security … a good book for use in educational training programs developed by corporate information security managers. Technical information security professionals could also benefit from reading the book. … the material is well-written and effectively organized."