This is a pretty good write up, overall. If you're interested in a more model-driven and systemic approach, try this, which is a pattern language for human ris

This is a pretty good write up, overall. If you're interested in a more model-driven and systemic approach, try this, which is a pattern language for human risk management. http://resiliencemaps.org/files/Dealing_in_Security.July2010.en.pdf http://resiliencemaps.org/files/Dealing_in_Security.July2010...