A tentative proposal: improving information assurance risk analysis models for small- and medium-sized enterprises through adoption of an open development model. - John C. Beachboard; Alma Cole; Mike Mellor; Steven Hernandez; Kregg Aytes; Nelson Massad (InfoSecCD, 2006)