Title: Security Metrics, Author: Andrew Jaquith
Title: A Practical Guide to Security Assessments, Author: Sudhanshu Kairab