Assessing and managing security risk in IT systems : a structured methodology / John McCumber. - McCumber, John, 1956- (Auerbach, 2004)