Foreword by the authorIntroduction to the bookPart 1 – Input1 Scope – What are we talking about?2 Goal – Why are we doing this?3 Assets - What do we have?4 Impact - How important is it?5 Threats - What can affect the organization?6 Vulnerabilities - Where could an attack take place?7 Risks - What could go wrong?Part 2 – Processing8 Processes - Getting the basics right9 Measures - Implementing improvements10 Outsourcing - Agreements with suppliers11 Culture - Attitude and behavior of employeesPart 3 – Output12 Maturity - Growth to the next level13 Infsec as CSR - Make the society saferConclusionReferencesInformation security... it just keeps getting easier and more fun!An accessible book for every organization, who wants to get the basics of information security right.Show leadership.Information security... it just keeps getting easier and more fun!An accessible book for every director, manager or employee of an organization, who wants to get the basics of information security right.Proper handling of sensitive information.Show leadership.Hereafter you will have less trouble with:1. Hacking effectsAll files encrypted by ransomware - you are being blackmailed and possibly the customer data is traded online.2. Data breachesNon-compliance with legislation, with the chance of fines- and the consequences of reputational damage.3. ICT hasslesNobody can work, because the website, application, or information unavailable again - and the cause is unclear.4. Unnecessary mistakesLeaving sensitive information on the street - the employee who does the wrong thing well-intentioned.So pick up this book, follow the practical tips...(or give it as a gift to the employee who can pick it up together with Mark Tissink)... and be a cyber leader!Information security... it just keeps getting easier and more fun!An accessible book for every director, manager or employee of an organization, who wants to get the basics of information security right.Proper handling of sensitive information. Show leadership.It is one of the few books that properly addresses the organizational / managerial part of information security that is so often forgotten.