My friend (and very cool person) Bruce Schneier has a new book out called Beyond Fear: Thinking Sensibly About Security in an Uncertain World. I'm told by a bunch of folks who've read it, that the book is quite good (I haven't had a chance to read it yet).