A formal qualitative risk management approach for IT security. - Bessy Mahopo; Hanifa Abdullah; Mathias Mujinga (ISSA, 2015)