Good overview for those without a security or information assurance background. Otherwise it's a bit too high level. Parts are repetitive as the author likes to reiterate points from earlier chapters throughout the book.