part Section 1: SECURITY STRATEGY - THINKING PRACTICALLY -- chapter 1 Goals and Filters -- chapter 2 Building Your Strategy -- part Section 2: SECURITY ORGANIZATION DESIGN-COST-EFFECTIVE STAFFING -- chapter 3 The Right People for the Right Jobs -- chapter 4 Sourcing Solutions -- part Section 3. SECURITY MANAMGE-MENT-EFFECTIVELY ENFORCING YOUR STRATEGY -- chapter 5 Policies, Standards, and Procedures -- chapter 6 Training and Awareness -- chapter 7 Cost-Effective Audit Management -- chapter 8 Reporting Your Value -- part Section 4: SECURITY TECHNOLOGIES-ESTABLISHING A SOUND FOUNDATION -- chapter 9 Risk Assessment -- chapter 10 Security Design Review -- chapter 11 Exploit Protection -- part Section 5. SECURITY OPERATIONS-MAINTAINING SECURITY EFFICIENTLY -- chapter 12 Identity and Access Management -- chapter 13 Cost-Effective Incident Response.