Mark Evered Serge Bögeholz A Case Study in Access Control Requirements for a Health Information System. 53-61 2004 conf/acsw/2004 ACSW Frontiers http://crpit.com/confpapers/CRPITV32Evered.pdf db/conf/acsw/acsw2004.html#EveredB04