Information technology risk management in enterprise environments a review of industry practices and a practical guide to risk management teams

Managing Information Risk and the Economics of Security

The security risk assessment handbook a complete guide for performing security risk assessments

Assessing and managing security risk in IT systems a structured methodology

Enterprise architecture and information assurance : developing a secure foundation

Information security design, implementation, measurement, and compliance