Security Controls Evaluation, Testing, and Assessment Handbook

I would recommend this be added to you reference shelf

hand desk guide

I have not read this book, specifically, but I have attended many training events with the author and if the book is written in the detail he offers in person, then this book is absolutely worth your time!!