Complete guide to security and privacy metrics measuring regulatory compliance, operational resilience, and ROI - Herrmann, Debra S. (Auerbach Publications, 2007)