Auditing the risk management process - Pickett K H Spencer (New Jersey John Wiley, 2005)
Appendix p225-264
Keywords: Audit