//-->
Risk management for computer security : protecting your network and information assets
Jones, Andy, (2005)