Assessing and managing security risk in IT systems : - McCumber, John 1956- (Auerbach Publications, 2005)