The reference book can be downloaded here
- Chapter 1: Creating a Security Program
- Chapter 2: Asset Management and Documentation
- Chapter 3: Policies
- Chapter 4: Standards and Procedures
- Chapter 5: User Education
- Chapter 6: Incident Response
- Chapter 7: Disaster Recovery
- Chapter 8: Industry Compliance Standards and Frameworks
- Chapter 9: Physical Security