Thinking Security, book review: The 'how' and 'why' of security

Steven M. Bellovin's rational but readable examination of security management is a masterclass for IT managers, chief security officers and system architects.