A Framework for Assessing IT Security Investment Portfolios. - Kumar, Ram L.; Park, Sungjune; Subramaniam, Chandrasekar; Sung, Tae (2006)