The increasing complexity of IT systems and their interoperability has compounded the challenging task of assessing the IT risks and devising cost-effective mitigating measures. Risk factors such as business dynamics and ...