Evan E. Anderson Joobin Choobineh Enterprise information security strategies. 22-29 2008 27 Computers & Security 1-2 http://dx.doi.org/10.1016/j.cose.2008.03.002 db/journals/compsec/compsec27.html#AndersonC08