C. A. Horne, S. B. Maynard, and A. Ahmad, “Organisational Information Security Strategy: Review, Discussion and Future Research”, AJIS, vol. 21, May 2017.