I have prepared several security surveys throughout the last couple of years and have always found that they were missing something. Once I started looking through this book I was given clear direction on the useful information required when conducting a security survey.
This book describes all the main sections required for a security review: Scoop of the project, organization assesment and requirements, physical security, internal controls, data system and records, emergency planning, and proprietary information, business impact analysis, survey questionary, etc.
This book goes into details on planning and analysis but does not give detailed techniques on aquireing information or what an effective security system looks like. It assumes the reader has a strong security background and is able to handle the details of investigation, interviewing, testing and evaluation. This book only touches on these topics.