Building a Practical Information Security Program by Jason Andress and Mark Leary. - Andress Jason (Syngress, 2017)