A more practical guide to building a CyberSecurity, IT Governance, GRC, or PCI/SOX/HIPAA compliance program for those who want an alternative to ISO 27002, COBIT 4, and NIST SP 800-53. Free book/whitepaper set by Peter Y. Kim. http://cybersecurityhelp.blogspot.com/
blog directory 
