Assessing and Managing Security Risk in IT Systems e-bokEngelska, 2004