From the Foreword: "Security management is not about the rote memorization of regulations, although a familiarity with the applicable directives is necessary to effectively manage any security program. Being conversant in the current governing written guidance and standard practices within a community, coupled with a practical understanding of how and where to apply that guidance to effectively protect resources, is what determines a true security professional--as opposed to an individual who only claims to be an expert in matters of security. That is the one who spends more time spouting (and likely misusing buzzwords) than providing practical advice on proper and effective security practices for any given situation."