Theorising on risk homeostasis in the context of information security behaviour
Taxonomy of information security risk assessment (ISRA)