Information Security Management Systems (ISMSs): Risk Diagnosis and Treatment. - Nick Halvorson (Encyclopedia of Information Assurance, 2011)