Information Systems (IS) security and control is a rapidly changing field,
and one where there can be strong disincentives to making information
public. I am indebted to many people who have provided information,
often informally, which has helped to guide the writing of this book. In
particular, I should like to thank the members of specialist groups in the
British Computer Society, including Tony Ball, Fleur Fisher, Mary
Hawking, Glyn Hayes, Brian Layzell, Willie List, John Pike, and Mark
Treleaven. The BCS Computer Audit Specialist Group has also provided
invaluable information through its meetings. I have also benefited from
the many challenges and ideas thrown up by postgraduate and final-year
students, particularly Olivier Massart and Jog Dhody.