These are going on my reading list. These were reviewed in Financial IT Security

This one was recommended by some one who knows both me and the author, Lance James: