V. M. Fernandes, "Two-stages security controls selection", in Procedia Technology, 2016, vol. 100, pp. 971-978