“Information Technology Risk Management Using ISO 31000 Based on the ISSAF Penetration Testing Framework”, ISI, vol. 9, no. 2, pp. 839–851, Oct. 2024, doi: 10.35314/1tq72v53.