Management of risk & information security data
Kaijen, J.A.H. (2008)