...document for information security managers, I began to base the appropriate parts of my course on their Information SecurityHandbook: A Guide for Managers. My course is more extensive than this handbook, but when possible, I try to reference...
http://www.sans.org/press/mgt512sp800.php