Assessing and managing security risk in IT systems a structured methodology - McCumber, John, 1956- (Auerbach Publications, 2005)