Information security evaluation a holistic approach - Tashi, Iqli (EPFL Press, 2011)