User-centred security applied to the development of a management information system. - Marcus Nohlberg; Johannes Bäckström (Inf. Manag. Comput. Secur., 2007)