The Security Risk Assessment Handbook by Emilie Richards, James C. Collins & Douglas J. Landoll