~ tracking down this book ~
Assessing and Managing Security Risk in It Systems by John McCumber — OmList