E. Sherif et al.,  "Operationalising cyber risk management: Connecting cyber incidents to MITRE ATT&CK techniques, controls, and metrics", in Cybersecurity & Cybercrime, vol. 1, no. 10, pp. 29-53, 2026