From rationale to lessons learned in the cloud information security risk assessment: a study of organizations in Sweden. - Ana Faizi; Ali Mohammad Padyab; Andreas Naess (Inf. Comput. Secur., 2022)