Key Concepts in Security Risk Management by David J. Brooks