Title: Assessing and Managing Security Risk in IT Systems
First published: June 15, 2004