Information security risk assessment toolkit practical assessments through data collection and data analysis - Talabis, Mark (Elsevier, 2013)