The best damn IT security management book period - Cunningham, Bryan (Syngress Publishing/Elsevier, 2007)