M. Wolf, D. Haworth, and L. Pietron, “Measuring An Information Security Awareness Program”, RBIS, vol. 15, no. 3, pp. 9–22, Jul. 2011.