"Human and Organizational Factors in Computer and Information Security: Pathways to Vulnerabilities." Computers and Security 28 (2009): 509-520.