Bhattacharya, S., & Marden, R. E. (1999). Decision Aids In Control Risk Assessments: Does The Metric Matter?. Review of Business Information Systems (RBIS), 3(4), 51–74. https://doi.org/10.19030/rbis.v3i4.5444