... in an objective and dynamic domain of risk, security and investment. The study developed a risk-driven security model for understanding of the role of human factors in security incidents, concerning risk, security and return of an investment on security. Social engineering attacks (SEAs) are used as security...