D. J. Ferreira and H. São Mamede, “Predicting Cybersecurity Risk - A Methodology for Assessments”, ARIS2-Journal, vol. 2, no. 2, pp. 50–63, Dec. 2022.