CITS: The Cost of IT Security Framework. - Marco R. Spruit; Wouter de Bruijn (Int. J. Inf. Secur. Priv., 2012)