by James F. Broder
The definitive classic on risk analysis for security and risk assessment professionals!