Sademies, Anni. Process Approach to Information Security Metrics in Finnish Industry and State Institutions. Otamedia Oy, 2004.