Picked off the CISSP book; I like this one :-)

Information Security is a Management Problem which often demands a Technical Solution