P. . Boonkrong and C. . Nuansomsri, “Fuzzy rule-based risk management under ISO/IEC27001:2013 standard for information security”, JCST, vol. 8, no. 1, pp. 33–40, Feb. 2023.