A modular approach to computer security risk management | IEEE Conference Publication | IEEE Xplore