A hybrid information security risk assessment procedure considering interdependences between controls. - Chi-Chun Lo; Wan-Jia Chen (Expert Syst. Appl., 2012)