Security risk management (SRM) program effectiveness: the realities of information security research. - Andrew G. Kotulic (IRMA Conference, 2000)

The security of the IT resource and management support: security risk management (SRM) program effectiveness. - Andrew G. Kotulic (IRMA Conference, 2000)

Integrating Security and Privacy Issues in System Design. - Jan Guynes Clark; Nicole Beebe; Andrew G. Kotulic (WOSIS, 2004)

Why there aren't more information security research studies. - Andrew G. Kotulic; Jan Guynes Clark (Inf. Manag., 2004)