You can purchase the third edition of the handbook at Routledge or explore its concepts through resources from O'Reilly.

Douglas Landoll's The Security Risk Assessment Handbook: A Complete Guide for Performing Security Risk Assessments provides a comprehensive, step-by-step approach to identifying, analyzing, and mitigating security risks, aimed at professionals. The guide introduces the RIIOT (Review, Interview, Inspect, Observe, Test) methodology for evaluating administrative, technical, and physical controls, updated to include cloud security and supply chain management in its third edition.