MANAGEMENT of INFORMATION SECURITY Third Edition C HAPTER 7 S ECURITY M ANAGEMENT P RACTICES In theory there is no difference between theory and practice,
