Information security strategies: towards an organizational multi-strategy perspective
Coping with systems risk: security planning models for management decision making