Hayden, Lance. IT Security Metrics A Practical Framework for Measuring Security & Protecting Data. Mc Graw Hil, 2010.