Assessing Information Security: Strategies, tactics, logic and framework

INTRODUCTION

‘We can’t just look at our own personal experiences or use the same mental recipes over and over again; we’ve got to look at other disciplines and activities and relate or connect them to what we know from our experiences and the strategic world we live in. If we can do this we will be able to surface new repertoires and (hopefully) develop a Fingerspitzengefühl¹ for folding our adversaries back inside themselves, morally-mentally-physically – so that they can neither appreciate nor cope with what’s happening – without suffering the same fate ourselves.’ – Colonel John Boyd

A thorough treatise dedicated to various aspects of information security auditing – including successfully passing an audit – must cover why and what kind of ...