ITIL V2 Security Management
Security Management is primarily the responsibility of the business, with the IT Security Officer responsible for setting Security Policy. This book looks at Security from the service provider stand-point. It identifies how Security Management relates to the IT Security Officer and provides the level of security necessary for the provision of the total service to the organisation.