Managing Risk and Information Security: Protect to Enable by Malcom Harkins is a must read for all security practitioners. Malcolm does a great job of breaking down the complex and nuanced concepts of information security and showing how to manage them in a practical way. His perspectives on information security are insightful and based on experience. This is a good book for professionals at all levels. Entry-level professionals will enjoy the real-life stories. And experienced practitioners will appreciate the breadth of topics.