A good book on information security for business users

My mother works as a business analyst in an IT department at a local bank. She doesn't code but mostly writes up requirements and does some testing. Her birthday is coming up and I want to give her a book on information security that gives a general overview on areas like network security,application security, incident response etc but aimed at people with a non IT background. Any ideas for a book that she would find useful?