An integrated conceptual model for information system security risk management supported by enterprise architecture management
Using an Enterprise Architecture for IT Risk Management