Policies & Risk Analysis CS461/ECE422 Fall 2011. Readings Chapters 14 and 15 of Computer Security Information Security Policies and Procedures, Thomas.