Auditing a risk analysis approach - Konrath, Larry F. (South-Western, 2002)