Elmé Smith, Jan H. P. Eloff: A Prototype for Assessing Information Technology Risks in Health Care. Comput. Secur. 21(3): 266-284 (2002)