Information security evaluation : a holistic approach - Tashi, Igli. (EPFL, 2011)