//-->
Managing information risk and the economics of security
Johnson, M. Eric, (2009)
Information security governance : a practical development and implementation approach
Brotby, W. Krag, (2009)
Vulnerability management
Foreman, Park, (2010)