Venelin Georgiev"A Two-Level Model for Describing the Risk Profile in Formulating Policy and Developing Security Capabilities."IT4Sec Reports(2015):it4sec_reports_129.pdf