Information Security A Practical Guide: Bridging the gap between IT and management (2015)