The best damn IT security management book period - Cunningham, Bryan, JD. (Syngress, 2007)
Includes index.