Repetitive and dense prose, but covers all the bases

I bought and read this book for a graduate-level course on data protection and privacy. It is a slog. Many topics receive treatment three times over — once in the main body of the text, again in long tables or lists that are supposed to supplement the main text, and yet again in vignettes written by people from industry. That said, the book is pretty comprehensive in its coverage of personnel, policies, and processes required for modern information security and privacy programs. My professor used a companion slide deck during the lectures for this course, which tracks closely with the text. Indeed, many of the tables and lists in the book are also used in the slide deck. If you can get your hands on the slide deck, it is more than adequate for an overview of the subject matter. The book is overkill unless you are actually writing information security policies and processes on a day-to-day basis.

###

