3 Asnar, Y. Giorgini, P. 2006 Modelling Risk and Identifying Countermeasure in Organizations. 1st International Workshop on Critical Information Infrastructures Security (CRITIS '06) Samos Island, Greece 30/08/2006