The Security Risk Assessment Handbook: A Complete Guide for Performing Security Risk Assessments, Second Edition
… this book, now in its second edition, covers a lot of ground for its 450 or so pages: information security, physical and environmental exposures, personnel risk and business continuity. Its author, a one-time senior analyst at the NSA, is clearly highly experienced in managing very large-scale risk assessment exercises. … a valuable guide for those commissioning or planning risk assessment exercises.— Michael Barwise, BSc, CEng, CITP, MBCS, inInfoSec Reviews, July 2011