Managing Risk and Information Security - Harkins (Apress, 2013)