The Effective CISSP: Security and Risk Management: 1

Information Security Risk Management for ISO27001/Iso27002, Calder, Alan<-

Managing Risk and Information Security: Protect to Enable,Malcol

PRAGMATIC Security Metrics: Applying Metametrics to Information Security

Building an Effective Security Program by Chris Williams (Paperback Book)