Information Security: Design, Implementation, Measurement, and Compliance - Layton, Timothy (CRC Press, 2009)