Alberts, Christopher and Dorofee, Audrey (2003)
Managing Information Security Risks: The OCTAVE Approach, Addision-Wesley.
Grant, Robert M (1998)
Contemporary Strategy Analysis (3rd edn), Blackwell.
Itami, H and Roehl, T (1987)
Mobilizing Invisible Assets, Harvard University Press.
Moses, Robin (1992) ‘Risk analysis and management?, Chapter 21 in Jackson, K M and Hruska, J,
Computer Security Reference Book, Butterworth-Heinemann.
Parker, Donn B (1981)
Computer Security Management, Reston.
Turnbull, Nigel (2003) ‘Foreword? in Calder, Alan and Watkins, Steve,
IT Governance: A Manager's Guide to Data Security & BS 7799/ISO 17799 (2nd edn), Kogan Page (Set Book).
Original Copyright © 2007 The Open University. Now made available within the Creative Commons framework under the CC Attribution – Non-commercial licence (see http://creativecommons.org/by-nc-sa/2.0/uk/).
