Information Security Risk Management for ISO 27001/ISO 27002: A Practical Guide to Risk, Assessment, and Control Selection Aligned with ISO Standards - Publishing (IEEE, 2003)