This is a good bundle of security books. I can vouch for Threats and Security Culture Playbook being worthwhile, and Software Transparency is on my to-read list.