Management of Information Security and Risk: Assurance Cases
City University London