Information Security Risk Management: In which security solutions is it worth investing?

S. Fenz, A. Ekelhart, T. Neubauer:
"Information Security Risk Management: In which security solutions is it worth investing?";
Communications of the Association for Information Systems,28(2011), 1; S. 329 - 356.