Bhattacharya, S., and R. E. Marden. “Decision Aids In Control Risk Assessments: Does The Metric Matter?”. Review of Business Information Systems (RBIS), vol. 3, no. 4, Oct. 1999, pp. 51-74, doi:10.19030/rbis.v3i4.5444.