A business approach to effective information technology risk analysis and management. - Sharon Halliday; Karin P. Badenhorst; Rossouw von Solms (Inf. Manag. Comput. Secur., 1996)