An Information Architecture for Risk Assessment and Management. - Paul R. Garvey; Douglas J. Phair; John A. Wilson (IEEE Softw., 1997)