M. B. Murtaza, “Developing An IT Risk Assessment Framework”, RBIS, vol. 11, no. 4, pp. 69–76, Oct. 2007.