Behavioral and policy issues in information systems security: the insider threat
Coping with systems risk: security planning models for management decision making