The main theme of the book is Information Security Management Systems. Built around this, the following topics are specifically developed: risk analysis and management, the organizational framework of information security within an organization, business continuity, security incident management, disaster recovery, security measurement, and finally, the control and certification of an Information Security Management System.