Information Security Risk Management for ISO 27001/ISO 27002 - Alan Calder; Steve Watkins (2019)