Invited talk 1: Security should pay: it should not cost. Information security and business applications 1. Information security standards. Invited talk 2: Encryption policy for the global information infrastructure. Management of information security 1. Cryptography, key management schemes and mobile computing. Invited talk 3: A new framework for information security to avoid information anarchy. Information security and groupware. Building secure applications. Invited talk 4: Functional and operational security system for open distributed environments. Open distributed security 1. Management of information security 2. Open distributed security 2. Invited talk 5: Viruses, corruption, denial, disruption and information assurance. Access control. Legal, ethical and social issues of information security. Appendixes. Index of contributors.