Nicho, Mathew, Khan, Shafaq, Rahman, M.S.M.K., "Managing information security risk using integrated governance risk and compliance.", , 2017