Managing Information Security by John Vacca & John R. Vacca