Security Engineering - Ross Anderson
One of the strongest books for understanding security as a management and systems discipline: adversaries, economics, usability, assurance, governance, and secure systems development.
Risk
Impact, likelihood, priority, and decision framing.
From Vulnerability to Business Risk
How to explain a technical vulnerability through impact, priority, control, and next action.
