"The Institutionalization of Security Risk Assessment." Connections: The Quarterly Journal 7, no. 2 (2008): 118-124.