The Security Risk Assessment Handbook by Douglas Landoll & Douglas L. Landoll