1. Information technology - security techniques - information security risk management, ISO/IEC 27005:2011 (2011) 1–68.
2. A conceptual framework of info structure for information security risk assessment (isra);Shamala;J. Inf. Secur. Appl.,2013
3. Risk management – principles and guidelines, ISO 31000:2009 (2009) 1–24.
4. Information technology - security techniques - information security management systems – requirements, ISO/IEC 27001:2013 (2013) 1–23.
5. Model-Driven Risk Analysis - The CORAS Approach;Lund,2011