2009 iapp-the corpprivacydeptmar13-2009 2008 Issa Journal Security Metrics Hype Reality And Value Demonstration 2007 issa journal-building a comprehensive security control framework 2006 issa journal-organizingand-managingforsuccess 2005 issa journal-simsevaluation 2005 issa journal-risk-management 
