M. Kiedrowicz i J. Stanik, „An information system risk model for the risk management system of an organisation processing sensitive data”, zif, t. 16, nr 3.1, s. 207–227, wrz. 2018.