Information Technology Risk Management Using ISO 31000 Based on the ISSAF Penetration Testing Framework. INOVTEK Polbeng - Seri Informatika, v. 9, n. 2, p. 839–851, 24 Oct.2024.