The purpose of Principles of Information Security, Fourth Edition, is to fill the need for a
quality academic textbook that surveys the discipline of information security. While there
are dozens of quality publications on information security and assurance that are oriented to
the practitioner, there is a dearth of textbooks that provide the student with a balanced
introduction to both security management and the technical components of security. By creating a book specifically from the perspective of the discipline of information systems, we
hope to close this gap. Further, there is a clear need for criminal justice, political science,accounting information systems, and other disciplines to gain a clear understanding of the
principles of information security, in order to formulate interdisciplinary solutions for systems vulnerabilities. The essential tenet of this textbook is that information security in the
modern organization is a problem for management to solve, and not one that technology
alone can address. In other words, the information security of an organization has important economic consequences, for which management will be held accountable.