Conducted properly, information security risk assessments provide managers with the feedback needed to manage risk through the understanding of threats to corporate assets, determination of current control vulnerabilities, and appropriate safeguards selection. Performed incorrectly, they can provide the false sense of security that allows potential threats to develop into disastrous losses of proprietary information, capital, and corporate value. Picking up where its bestselling predecessors ...

This book offers a practical guide for policy advisors and their managers, grounded in the author's extensive experience as a senior policy practitioner in New Zealand's Westminster-style system of government. A key message is that effective policy advising is less about cycles, stages and steps, and more about relationships, integrity and communication. Policy making is incremental social problem solving.

Policy advising is mostly learned on the job, like an apprenticeship. It starts with ca...