CRAG: A Guideline to Perform a Cybersecurity Risk Audits. - Isaac D. Sánchez-García; Tomás San Feliu Gilabert; José Antonio Calvo-Manzano (WITCOM, 2023)

Countermeasures and their taxonomies for risk treatment in cybersecurity: A systematic mapping review. - Isaac D. Sánchez-García; Tomás San Feliu Gilabert; José Antonio Calvo-Manzano (Comput. Secur., 2023)

Building a cyber risk treatment taxonomy. - Isaac D. Sánchez-García; Tomás San Feliu; José A. Calvo-Manzano (Clust. Comput., 2025)