Information Security Risk Assessment. - Samantha Thomas Cruz (Information Security Management Handbook, 6th ed., 2007)