A cost model for managing information security hazards. - Love Ekenberg; Subhash Oberoi; István Orci (Comput. Secur., 1995)