security-architecture
Quantitative model for measuring organizational security risk caused by human dependencies, decision concentration, and bus-factor effects.