[Moses89] Robin Moses, The CCTA Risk Analysis and Management Methodology (CRAMM)--Risk Management Model, Proceedings of the Second International Computer Security Risk Management Model Builders' Workshop, June 1989. []