The following are links to publications in a variety of formats.
A discussion about the programs and capabilities at SAIC in the area of information security products and services
Examining risk management and its contribution to information security practice
What are the costs associated with system failure? What are the costs associated with failure attributable to information security lapses, holes and failure?
But for cryptography, Tannenburg was lost.... Setting up the cold war conflict over the ages through a series of information security failures that changed the course of history
How can you judge the state of security in computer systems and networks?
Who owns the NII, anyway? Who is responsible for protecting it?
Collecting and protecting information: two sides of the same coin
The landmark study that paves the way for security policy and practice in the coming decades
An in-progress work examining conflict across networks and in cyberspace
A must-have reference document in order to talk the talk
Examining outsourcing as a viable option, building upon knowledge gained over the past 20 years