Transferring Information Security Risk to an Opponent: New Principles for Non-Financial Risk Transfer Treatments - Baskerville, Richard (IFIP, 2011)