Security Risk Management: Building an Information Security Risk Management Program from the Ground Up - książka

Teaches you practical techniques that will be used on a daily basis, while also explaining the fundamentals so you understand the rationale behind these practices. This book helps you to break free from the so-called 'best practices' argument by articulating risk exposures in business terms.