Murtaza, M. B. “Developing An IT Risk Assessment Framework”. Review of Business Information Systems (RBIS), vol. 11, no. 4, Oct. 2007, pp. 69-76, doi:10.19030/rbis.v11i4.4407.