Title: A qualitative approach to computer security risk analysis and management for the commercial sector
First published: 1995