At the same time that information security organizations face significant budgetary challenges, both cyber security threats and compliance requirements have escalated. This book describes actionable techniques for running an information-security management program during an era that has been known for cost-cutting to information security budgets. The concept is to allow practitioners to acquire skills at fiscal proficiency in managing information security issues, allowing them to deliver effective and efficient service while working within the restricted budgetary environment that exists at many information-security organizations.