"A Method of Evaluating Assurance Requirements." Information & Security: An International Journal 28, no. 1 (2012): 108-120.