Re: practical Security Management reference

The Standard of Good Practice for Information Security is a mature, 
comprehensive, and practical standard published by the Information 
Security Forum (ISF). It is available to the public at 
www.securityforum.org and contains detailed, practical IS standards for 
Security Management and other areas, such as Networks, Computer 
Installations, Systems Development, and Critical Business Applications.

The ISF is entirely dedicated to researching and publishing practical 
advise and best practices for the world's largest organizations. A member 
list is available on that website. In addition to the Standard, they 
publish extensive research reports that do exactly what you may be 
interested in.

-- Alan Willcox

The views expressed here are mine and do not reflect the official opinion 
of my employer or the organization through which the Internet was 
accessed.