@article{TUW-186982, author = {Fenz, Stefan and Ekelhart, Andreas}, title = {Verification, Validation, and Evaluation in Information Security Risk Management}, journal = {IEEE Security {\&} Privacy}, year = {2011}, volume = {9}, number = {2}, pages = {58--65}, doi = {10.1109/MSP.2010.117} }