The state of the art of risk assessment and management for information systems | IEEE Conference Publication | IEEE Xplore