Generalized risk assessment index for information systems auditing - Peto, David (Array, 2006)