Security as pure technology age long gone, and modern practitioners need to understand the social and cognitive aspects of security if they succeed. Shostack and Stewart teach readers exactly what they need to know - I just wish I could have it when I first started out.? - David Mortman, CSO-in-Residence Echelon One, former CSO Siebel Systems Why information security is so dysfunctional? And why security breach notices are the best thing that ever happened to information security. In a clear and engaging prose, they shed new light on the critical challenges faced by the field of security. ? Are you re-CIO, IT manager, or security specialist, this book will open your eyes to new ways of thinking about - and overcoming - your most pressing challenges of security. The New School enables you to take control, while others struggle with the crisis of non-stop. Better evidence for better decision-making Why data security you have doesn t support effective decision making - and what to do about it Beyond security silos:? Getting the job done together? ? Why it s so hard to improve security in isolation - and how the entire industry can make it happen and evolve Amateurs study cryptography; professional economic studies What IT security leaders can and should learn from other scientific fields A bigger bang for every buck How to re-allocate your scarce resources where they are? Will do the most good