Building a Practical Information Security ProgramDavid Guretz, Jason Andress, Mark Leary · First published 2016Open the Tome