@misc{indiciae4a632cf55852, title = {Why 2 times 2 ain't necessarily 4 - at least not in IT security risk assessment}, author = {Jens Braband}, year = {2016}, url = {https://arxiv.org/abs/1603.03710}, note = {Source identifier: 1603.03710} }