Pei-yu Chen, Gaurav Kataria and Ramayya Krishnan. “Correlated Failures, Diversiﬁcation and Information Security Risk Management”. MIS Quarterly. 35(2): 397-422, 2011.