Engineering information security the application of systems engineering concepts to achieve information assurance (Wiley, 2011)