A Framework for Business Value Penetration Testing - James S. Tiller (Taylor and Francis, 2004)