I have an old electronic version (published 01/01/98) of "Handbook of Information Security Management", email me if you want.