The Malaysian public sector information security risk assessment methodology (MyRAM) MAMPU. (MAMPU, 2005)