Information Risk and Security explains the complex and diverse sources of risk for any organization and provides clear guidance and strategies to prevent these threats before they happen and to investigate them, if and when they do. This is an essential guide for risk and security managers, computer auditors, investigators, IT managers, line managers and non-technical experts; all those who need to understand the threat to workplace computer and information systems.