Guarro, 1989. Risk analysis and risk management models for information systems security applications 25.. https://doi.org/10.1016/0951-8320(89)90027-6