Information Security Cost Management by Ian Lim & Ioana V. Bazavan