Andreas Schaad Volkmar Lotz Karsten Sohr A model-checking approach to analysing organisational controls in a loan origination process. 139-149 2006 conf/sacmat/2006 SACMAT http://doi.acm.org/10.1145/1133058.1133079 db/conf/sacmat/sacmat2006.html#SchaadLS06