Putting Risk Management Into Practice. - Raymond C. Williams; Julie A. Walker; Audrey J. Dorofee (IEEE Softw., 1997)

Security incident response: rethinking risk management. - Christopher J. Alberts; Audrey J. Dorofee (CARS, 2004)

Beyond good practice: why HIPAA only addresses part of the data security problem. - Jeffery Collmann; D. Lambert; M. Brummett; D. DeFord; Johnathan Coleman; Ted Cooper; Keith R. McCall; Dennis M. Seymour; Christopher J. Alberts; Audrey J. Dorofee (CARS, 2004)

A Systemic Approach for Assessing Software Supply-Chain Risk. - Christopher J. Alberts; Audrey J. Dorofee; Rita Creel; Robert J. Ellison; Carol Woody (HICSS, 2011)

An Incident Management Ontology. - David A. Mundie; Robin Ruefle; Audrey J. Dorofee; Samuel J. Perl; John McCloud; Matthew Collins (STIDS, 2014)

Computer Security Incident Response Team Development and Evolution. - Robin Ruefle; Audrey J. Dorofee; David A. Mundie; Allen D. Householder; Michael Murray; Samuel J. Perl (IEEE Secur. Priv., 2014)